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Australia’s 
Major Distributor 
of Programming 
Tools! 


MicroWay is Australia’s 
largest distributor of 
development products. With 
over 3,000 products and 
over 20,000 customers 
throughout Australia we’ve been 
helping Australian 
developers for over 16 years. 
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| 
VMWare | 
Workstation | 


VMware delivers a flexible and safe 

* computing environment by providing 
———_—— multiple virtual computers on a 
single PC. VMware is the solution for: Windows with 
Linux; Developers; Technical Support; Quality 
Assurance; Web Developers. You can create a whole 
set of virtual computers — whether you operate under 
Linux, Windows NT, or Windows 2000. And forget 
about dual booting. You can run them all at the same 
time. All your work takes place on one machine. 


CodeWright 


CodeWright provides a complete 
toolkit with the ability to adapt to 
new technologies and languages. 
CodeWright standardises 
development environments and 
NEW alleviates the need for developers 
“S VERSION! < to continually learn the 
a idiosyncrasies of a variety of 
development GUls. Version 6.6 features: Advanced 
StarTeam Integration; enhanced CodeSense for C#, } 
Java, C and C++; Directory Differencing and Side- 


by-Side Difference Printing. 
SAVE $105 


RoboHelp 
Enterprise 


RoboHelp Enterprise’s new help 
technology provides development 
teams direct feedback about end 
users questions and problems. RoboHelp Enterprise 
increases the efficiency of development teams at | 
organisations of any size, and simultaneously reduces 
the high cost of support with features such as feedback 
reports give you data on what users are asking, } 
Superior Natural Language Search and Supports Team 
development with Fast Project Merging. 


Special pricing! 
SAVE $850 


» Crystal Reports 
_ Developer 8.5 


With Crystal Reports you can 
easily deliver rich, interactive 
content from virtually any data 
NEW 7 source, publish it to the Web, 

~ VERSION! and integrate it within your 

= applications. Includes flexible 
developer tools for web and Windows developers, 
a royalty-free runtime license and comprehensive 
support for development languages. 


RoboHelp 
Office 


The industry standard in 
Help Development 


RoboHelp Office is a powerful suite that lets you 
create full-featured Help systems for your Web 
based applications and software applications. This 
versatile tool automates the Help development 
process making it fast and easy to create full- 
featured Help. Simply add a RoboHELP system to 
your application to significantly improve usability. 


=~m_ VisualSoft 


= isualSoft 
=a ) 


eS NetDev hag 
NetDev VisualSoft NetDev is a suite of 
power-packed developer-end 


components for developing interactive web 
applications. It consists of 21 ready-to-be-deployed 
components. 

File transactions, Protocol transactions and 
Messaging adhereing to RFC standards could be 
achieved with greater proficiency. This suite 
implements most of the networking protocols that 
enable socket and network related programming. 
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MKS Toolkit for 
Developers 


The Power of 
UNIX on WINDOWS! 


Now all your UNIX knowledge is 
just as useful on Windows. MKS Toolkit for 
Developers is a Windows product for software, 
script, and Web developers, who can choose from : 
UNIX-style command-line or graphical Visual Studio 
build environments. It is ideal for developing 
common, cross-platform scripts for UNIX, Linux, 
and Windows, from a single Windows desktop. 


Ontlnicsit 


Optimizeit is a powerful profiling 
solution for Java developers 

‘| > VERSION! looking to rapidly track down and 
a fix performance issues such as 
memory leaks and performance bottlenecks in any 
Java programs. Optimizeit is essential for the 
detection of performance issues in application 
server environments. Optimizeit provides instant 
integration with most popular application servers, 
its overhead limiting features ensure scalability and 
new offline profiling allows testing of applications 
in production environments. 


4A 
Toolkit 


NEW. 7 


sales@microway.com.au 


| 
Tel: 1300 55 33 13 


Prices, correct at time of going to press, may change without notice. Product names are registered trademarks of their respective owners. 
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jProbe Profiler 


g : Quickly eliminate performance 
- bottlenecks caused by inefficient 
wnt algorithms in Java code. JProbe 
mmm <P COtiler combines a visual call graph 
interface and unique data collection 
technology to provide highly accurate performance 
diagnostics, including line-by-line results. JProbe 
Memory Debugger pinpoints the cause of memory 
“leaks” in Java applications by tracking which objects 
hold references to other objects. Visualise memory 
usage, including memory allocation and garbage 
collection, in real time with the intuitive Memory 
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» 7 325 window. 
CMX-MicroNet 
TCP/IP stack 


True TCP/IP Networking on 8- and 16-Bit Processors 
CMxX-MicroNet is a TCP/IP stack that actually 
resides and runs natively on 8-bit processors — 
embedded engineers will be impressed with its 
specifications. For example, running on an 8051 
device, it takes from 2.5K to 12K of ROM, depending 
upon the configuration and protocols utilised. The 
12K of ROM includes the Core, TCP, UDP, SLIP, 
PPP, IP, Virtual File System, Modem, and HTTP Web 
Server. RAM requirements vary depending upon the 
om mee actual application, but start at about 
C { | 160 bytes. 


| Leadtools 


LEADTOOLS is a family of toolkits 
designed for programmers to help 
you integrate raster, document, 
medical, multimedia, vector and Internet imaging into 
your applications quickly and easily. LEADTOOLS 
gives you the most flexible and powerful imaging 
technology available, offering development support 
for File Formats (60+), Image Compression, Image 
Processing, Colour Conversion, Image Display, 
Special Effects, Scanning/Capture, Common Dialogs, 
Printing, DICOM, Annotations, Forms Recognition, 
Document Clean-up, PDF, OCR, Barcode, Database, 


and more. 
c SAVE $170 


InstallShield | 
Express 3.5 


Custom Installations out of 
the Box in Minutes. 


NEW » ~/ InstallShield Express is the easiest 
> VERSION! <— and most economical solution for 
ae pS quickly developing straightforward 
installations. Express lets you create genuine 
InstallShield installations in less than a day, using a 
visual installation checklist as a guide. Express fits 
any budget and offers an upgrade path to 
Installshield Developer 


C SAVE $90 ) 
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UltraSuite 


Along with the familiar, easy-to- 
use interfaces of Microsoft 
Outlook, Microsoft Office and 
Windows Explorer, UltraSuite 
provides an innovative grid 
component-UltraGrid, plus UltraToolBars that is 
loaded with functionality. With 45 controls, 
UltraSuite includes everything necessary to create 
solutions that look great, and run efficiently, faster 
than ever before. Make the most of your investment 
- UltraSuite is available with optional Subscription 
Service, or the UltraSuite Enterprise 


Edition. Y SAVE $215 ) 


- MicroWay guarantees that our prices 
are lower than buying directly from 
Overseas Suppliers and we'll guarantee 
to match all local prices. So you know 
that when you buy from MicroWay, 
you get a fair deal. 

*conditions apply 


Chart FX Client Server is a COM 
based product for developers that 
allows you to deploy powerful 
charts using VB, Visual C++, 
Delphi and Access: The Wizard | 
manager will help set-up your preferred chart type 
and visual attributes, without even handling 
properties or writing code. The Annotation Extension 
allows programmers and end users to draw shapes 
and import images that can be used to highlight 
important data in the charts. Includes 400+ 
Properties, Methods and Objects. 


$1085 rade 


‘tworking < band advanced workload 
j y Intel computers. GSX Server 
accelerates lopment, test and deployment 
while increa: ability and security. 
Create multiple virtual machines that run 
simultaneously onia si gle physical server. 


ay. is a comprehensive suite of windows- 
based, multi-language, developer/ 
productivity tools! It helps developers to automatically 
detect, diagnose and resolve software errors, 
maximise their code performance, and insure that 
their code is fully utilised and debugged. DevPartner 
for Visual C++ includes: BoundsChecker - an 
automatic runtime error debugger, TrueTime - a 
runtime performance tool, and TrueCoverage - a 
eeverage execution tool. 
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Alcagle 
Program mobile devices 
AireLogic is an IDE that gives you 
the ability to create wireless 
applications quickly without the 

NEW / need of intensive programming 
> PRODUCT! <— knowledge. With AireLogic’s 
flowchart-style interface, you can 
easily create an application’s logic, 
connect with any database and then AireLogic’s 
algorithms will automatically generate server and 
client-side code. 


To receive a free copy of our 
latest product catalogue 
call 1300 55 33 13 
or email info@microway.com.au 


WwW.microway.com.au 


All prices include GST. 
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Updating the Linux Code Base 
Dr Carlo Kopp looks at recent additions to 
the Linux code base 


Delphi 6.0 and Kylix 
David Williams reviews Borland's Windows 
and Linux IDEs: can you make software for 
both platforms from a single code base? 


DB Platform Battles 
IBM has to squeeze DB2 and Informix into 
one framework; Oracle's architecture is drifting 
towards Intel platforms; and Microsoft wants 
business from both of them. What's it mean 
for the database developer? 


XML Supplement 
Systems Developer looks at movements in the 
XML space from a developer's point of view. 


For advertising enquiries for this issue, 
contact Fleur Mahoney on (02) 9080 4489 
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Questionable awards calling a product something like 


“Best of November” often inhabit this part of an ad. 


Tired of ad fluff? Get essential developer resources with an MSDN*® Subscription. 
Want to get priority access to over 1,000 continuously-updated product 
downloads, DVDs, or CDs with the latest tools, platform, and server 
technologies? Get an MSDN Subscription, and start building your next 
big thing. msdn.microsoft.com/subscriptions or your nearest reseller. 
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By Richard Chirgwin, 
Group Editor 


Group Editor 
Richard Chirgwin (02) 9080 4456 
richard.chirgwin@informa.com.au 


Journalist 
David Masters 


Sub Editor 
Colleen Mitchell 


Contributors 

Chris Bevitt, Pamela Clark-Dickson, Dr Carlo Kopp, 
Joe Magee, Andrew Parsons, Tony Stevenson, 
Mark White, David Williams, Danny Zeman 


t’s always hard coming back from a holiday, 
even when you just head off to somewhere 
really commonplace like Port Stephens. 

I was, unusually, completely out-of-touch: 
no mobile reception to speak of, and because of a 
lightning strike on the first night, no landline 
phones and no Internet connection. 

Memo to Telstra: move more quickly. I 
could, perhaps, understand fixes taking ages if 
we're talking about two hundred kilometres west 
of Muttaburra — but the resort I was at was in a 
spot within reach of Raymond Terrace. 

Because of the timing, the unconnectedness, 
and my decision not to bother with TV news while 
trying to relax, I] didn’t know the election was 
announced. I had the idea something was going on, 
though, because towards the end of the holiday, the 
quiet of a remote-ish resort was periodically broken 
by sorties from RAAF Williamstown. The resort 
owner’s reaction would have sent a warm glow 
through John Howard’s heart: “Oh well, it’s the 
sound of freedom.” Of course, it would be improper 
to suggest that the defence forces would respond to 
a ministerial instruction so blatantly political . . . 
And anyway, this is a software magazine. Sorry 
again: the holiday was a nice distraction. 

Some housekeeping, as they say in confer- 
ences. I'd welcome suggestions from you, the 


readers, about what should be on the editorial 
calendar for 2002. Suggestions to richard.chirg- 
win@informa.com.au please. 

And I'd like to let you know about a plan I 
have for 2002: more reviews of developer tools — 
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lots more. Starting in February, there will be three 
developer tools reviewed in each issue of Systems 
Developer. We'll also continue with our major fea- 
tures and columns, of course. 

By the time you read this, Windows XP will 
have hit the retail shelves. The timing is really 
tough, with consumers not buying new PCs in 
anything like the numbers of a year or two ago. 
Even Harvey Norman has decided not to offer its 
midnight opening. 

It’s likely that most of the IT media is 
going to pitch Windows XP as a make-or-break 
play for Microsoft. Maybe that’s true — but sales 
in the first week, or first month, won’t make or 
break Redmond. 

And anyway, in ‘big picture’ terms, .Net is 
arguably more important. The days of buying a 
new PC just to get a new operating system GUI are 
gone: Windows XP will stand or fall on whether 
the new applications are compelling enough to 
stimulate demand. What Windows XP really 
needs is developers — developers with ideas on one 
side and (Microsoft hopes) .Net on the other. 

In the meantime, brace yourselves for ‘XP 
fails to ignite’ stories in the trash media. . . 
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Oracle runs SAP 


4 times faster than IBM 


40,000 _ 


35,000 _| 


SAP Standard 
Performance Test 20,000 _| 


Orders 
Per Hour 15,000 _|- 


Oracle’s IBM's 
Best Score Best Score 


Source: sap.com 
That’s why SAP customers 
choose Oracle over IBM 10 to 1. 


Interesting. 


ORACLE 


SOFTWARE POWERS THE INTERNET™ 


oracle.com 


These benchmark results fully comply with the SAP Benchmark Council's issued benchmark regulations and have been audited and certified by SAP. SAP Assemble-to-Order (ATO) Standard 4.6B Application Benchmark 
for a two-tier configuration as of May 29, 2001: Fujitsu Siemens Primepower 2000, 128-way SMP, Sparc 64, 560 MHz, 128 GB, Solaris 8, Oracle 8.1.7, 34,260 AO-per-hour, SAP Certification #2001018, 5/29/01. 
IBM eServer pSeries 680, 24-way SMP, RS64-IV, 600 MHz, 32 GB, AIX 4.3.3, IBM DB2 UDB 7.1, 8,570 AO-per-hour, SAP Certification #2000025, 10/13/00. Source: http://www.sap.com/benchmark. 
Copyright © 2001 Oracle Corporation. All rights reserved. Oracle is a registered trademark, and Software Powers the Internet is a trademark or registered trademark of Oracle Corporation.Other names may be trademarks of their respective owners. GREY/ORRO0S9 


News in Brief 


Motorola Labs have managed to 
combine the properties of silicon 
with the speed and optical capa- 
bilities of compound semiconduc- 
tors known as the Ill-V materials 
(gallium arsenide, indium phos- 
phate, gallium nitride etcetera). 
Motorola claims the breakthrough 
will provide significantly less 
expensive high-performance opti- 
cal communications equipment, 
and high-speed microprocessor- 
based subsystems — by increasing 
substrate size, reducing substrate 
costs and processing costs for Ill-V 
manufacturing. Previously, the 
two crystalline structures could 
not be matched, with Motorola 
adding an intermediate material 
layer to bond the two. 


Canberra business incubator EPI- 
Corp opened its new facilities, 
funded by an $8 million grant 
from the Commonwealth Govern- 
ment’s Building on IT Strengths 
(BITS) Program. The facility is 
close to the majority of its share- 
holders — CSIRO, ANUtech, the 
ANU and University of Canberra 
—and has broadband access pro- 
vided by TransACT. Companies 
currently within the incubator 
include Thiri, an Internet transac- 
tion systems developer, and GP 
Sports, whose development 
focusses on analysing perfor- 
mance data from elite athletes. 


m.Net was awarded $9.23 million 
from the Federal Government's 
Advanced Networks Program to 
develop an advanced wireless net- 
work in Adelaide’s North Terrace 
District, for the development and 
testing of advanced mobile appli- 
cations. The network is proposed 
to be operational for the World 
Congress on IT 2002 in February, 
where delegates will be able to 
use handheld computers to com- 
municate and access information. 


Sun Revaluing Rise With Big Box Unix 


Operating Systems 


High-end Unix systems running on proprietary 
silicon have been under pressure in recent times, 
squeezed between Linux and iA-64 silicon. 

Sun has declined the option taken by many 
of the former powerhouses of big Unix. Rather 
than bid farewell to Unix and learn to love life as 
a Microsoft OEM, Sun’s approach is to revalue 
Risc-based Unix upwards. 

With the latest release in its family of big- 
iron servers, Sun is now pitching itself as offering 
a mainframe alternative with the release of its Sun 
Fire 15K server. 

The clear objective is to drive Sun Unix 
into lucrative new markets at the top end — and 
to get a return on the technology agreement 
with Cray that forms the foundation of the Sun 
Fire 15K kit. 

The strategy won't come without risk, 
however: the mainframe market is more confused 
and turbulent than most commentators admit. 
Outsourcing has put mainframe buying power in 
the hands of the big outsourcing shops. This 
produces a mixed picture of the mainframe econ- 
omy: there are fewer licenses in most territories, 
prices are falling, and even at a time when 
demand for mainframe processing power is rising 
most of IBM’s ‘plug-compatible’ competitors of 
old have abandoned the space. 


Sun’s product sales manager for enterprise 
servers Robert Becker said that “IBM is now the 
single source supplier for mainframe users”. 

Becker expects life to get tougher for 
mainframe customers into the future as “main- 
frame system programmers reach the end of their 
working lives”. 

Most of the people entering the IT industry 
— 85%, according to Becker — are targeting jobs 
outside the mainframe shops, making main- 
frame expertise harder to find. If that, in turn, 
makes mainframe users more dependent on 
fat-five outsourcing and IBM services, Sun 
hopes those customers will be more willing to 
consider a shift to the Unix platform. 

Just providing machinery won't be 
enough to make Sparc the next big thing in the 
big iron market, though — so Sun is rolling out 
the Sun Fire 15K on the back of a suite of 
service offerings designed to deliver high system 
availability, and to help mainframe customers 
migrate their existing applications to the 
Solaris-based platform. 

The system consolidation and migration 
service offering flows from Sun’s acquisition of 
Critical Path’s mainframe rehosting business, 
which puts CICS applications onto Sun servers. 
That way, customers will be able to reuse 
“existing mainframe data, application code and 
IT expertise reaching back to PL/1”. @ 
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VPN-1 Is easier to manage 


than two. 


Check Point’s integrated VPN-1™ and FireWall-1° solution is not only easier to manage, but 
ultimately more secure than two separate solutions. When integrated, the firewall and VPN 
share the same user, resource and policy information, to provide the highest level of granular 
access control and security. With the power of centralized management, integrated user 
authentication, consolidated logging, and the utmost in security, you get the best of both 
worlds. Which explains why we have more VPN and firewall installations than anyone 
else. To satisfy your security needs for today and all your tomorrows, download our white 


paper, “Integrated VPN/Firewalls” at www.checkpoint.com/vpn1 and ease your mind. 


CHECK POINT” 


Software Technologies Ltd. 


anz@checkpoint.com ph: 1800 245 768 


©2000 Check Point Software Technologies Ltd. VPN-1 
is a trademark of Check Point Software Technologies Ltd. 


We Secure the Internet. 


inus Biggest Bluest Buddy 


Operating Systems 


IBM’s Linux strategy continues to grow in size 
and strength — with its eyes firmly set on the high 
end. While some are starting to write off the 
fledgling OS, the world’s largest IT organisation 
believes it is the clear way forward. 

“Unix, AIX and Solaris, will still have a place 
... but the two mass production operating systems 
will undoubtedly be Windows and Linux,” Steve 
Solazzo, IBM vice president of Linux, told Systems 
Developer at a Server conference in Beijing. 

And the development work on the Linux 
platform seems to be ramping up — with much 
more solid versions of the platform emerging. 

“It’s almost ready for the kind of work done 
by high-end Unix. . 
first kernel release that’s ready for the enterprise,” 


. the 2.4 kernel is really the 


Solazzo said. Solazzo backed this up by pointing 
to a function review by D.H. Brown Associates, 
which rated the SuSe, Red Hat, Caldera and 
TurboLinux products above the functionality of 
the weakest version of Unix, and not far off the 
strongest Unix system. 


Yet there are two major hurdles for the OS 
that IBM is hoping to overcome — scalability and 
a lack of applications. 

To secure the future of Linux, IBM is starting 
to seed the student academic community with 
incentives for studying and developing on open 
source. Initiatives include a competition called the 
Linux Scholar Challenge and Scholar Programs, pro- 
viding faculties with free software, courseware and 
electronic help. A number of Linux hubs are also 
being installed at US and UK universities — with an 
Asia-Pacific location yet to be selected — providing 
CPU time on a Z-series mainframe running Linux 
free-of-charge for developers and students. 

Big Blue also has an internal Linux division 
with a major presence in Australia (Canberra and 
Adelaide), with ten local developers as part of the 
250-strong Linux Technology Centre. Scalability 
is a major project for the group — which hopes 
to reliably run Linux on SMP 8-way servers by 
early next year. 
m™ David Masters attended the IBM Asia- 
Pacific Server Conference in Beijing, China as 
a guest of IBM. 


Asian Influence 


International Business 


After several years spent doing custom software 
development projects for Australian telcos such 
as Telstra, Cable & Wireless Optus and, more 
recently, XYZed, using nomadic software devel- 
opment teams, India’s Network Programs has set 
up a local presence and designed a product 
specifically for the Australian market (NetDSL). 

Network Programs was founded in 1995 
by a group of previous Bell Labs and Bellcore 
employees, although its current management 
team has a strong Siemens representation, with 
CEO Vipin Tyagi, and executive vice president 
for network systems, CG Deshpande, both having 
spent time with the European telecomms equip- 
ment manufacturer. 


The company draws on the resources of 
C-Dot, an Indian telecomms research and develop- 
ment centre, and has offices in the US, Israel, the 
UK and Japan, as well as India and Australia. 

Its opening of an office in Australia is a reflec- 
tion of the work it has done in this country, and also 
of its belief that the Australian market “has a lot of 
potential”, Network Programs Australia business 
development manager, Shakil Chandra, said. 

NetDSL is an order management and provi- 
sioning system (basically an OSS) for DSL, pitched at 
the DSL reseller market. Chandra freely admits, 
however, that Network Programs Australia faces 
significant challenges: the company is still to obtain 
an accurate picture of who the players in this market 
are, its products are new and the company itself is 
relatively unknown. ll Pamela Clark-Dickson 


News in Brief _ 


Microsoft announced that Visual 
J# .Net is now available for 
download from the MSDN Web 
site — allowing Java developers 
to migrate applications written in 
Visual J++ to the .Net framework, 
or write XML Web services using 
Java syntax. Visual J# will inte- 
grate into the Visual Studio .Net 
IDE, and will incorporate the 
functionality of the framework 
including ASP.NET, ADO.NET and 
Windows Forms. 


Australian developer Pronto 
Software signed a partnership 
agreement with Software AG to 
become an ISV, giving it access 
to Software AG's EntireX middle- 
ware, and expertise to XML- 
enable Pronto’s ERP solution. 
PRONTO ERP had previously been 
developed in proprietary 4GL, and 
had limited integration ability. 
With Software AG assistance, 
Pronto expects to release a new 
XML-enabled version of its soft- 
ware in April 2002. 


DST International and AM Cor- 
poration will combine to develop 
Australia’s first single Wrap retail 
funds management platform — 
allowing financial advisors to 
manage and monitor client funds 
over the Internet. The system 
will combine DSTI’s expertise in 
portfolio management software 
with AM Corp's superannuation 
system. The companies have 
formed a development team to 
commercialise the system in 2002. 


Siemens and Borland have part- 
nered to increase development of 
wireless applications in Java. 
Siemens will distribute JBuilder 
MobileSet and Personal editions 
to its developer community to 
develop applications specifically 
for it's Java-enabled SL 45i k-Java 
mobile phone. 
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Tivoli Targets E-biz Software Management 


In Sydney during September to 


Web Management 


Tivoli had a surprise recently. 

According to Graeme Beardsell, 
director of the Tivoli Web Management 
Business Unit, Asia Pacific, some customer 
research for Web management product 
directions were the source of the surprise. 
Tivoli had expected the business-to-busi- 
ness space to generate the greatest interest 
in Web management, but after researching 
1200 customers he said Tivoli found most 
of the respondents wanted tools to manage 
business-to-consumer sites. 

With any luck, the product suite 
launched out of that research will address both. 


launch the latest product in the suite, 
Web Component Manager to Tivoli cus- 
tomers — the public launch took place 
mid-October — Beardsell said the aims 
of the product are threefold: “to under- 
stand and manage the user experience, 
without the invasive process of using 
agents; to manage the brand image on 
the Web, because companies are nervous 
about the impact of poor performance; 
and to run applications against the Web 
site to get an understanding of the cus- 
tomer experience”. 

The Web Component Manager is 
designed to complement the Web Service 


Manager and Web Service Analyser already 
on the market. 

Beardsell said most companies are 
“surprised that their sites are not per- 
forming up to scratch — IT shops spend 
millions, but they don’t go the last mile 
to assess Web performance in any regu- 
lar fashion”, 

According to Tivoli’s Web Services 
product manager Leonard Bowcock, the 
new software is designed to provide fine- 
grained analysis of the performance of all 
the different components needed to run a 
Web presence, covering systems like DNS 
and proxy servers as well as the Web servers 
and transaction systems. 


NEC Differentiates 


Networking 


NEC launched its Enterprise Open Network 
(NEON) — a suite of solutions, professional 
and telecommunications services offerings 
and CPE/LAN devices, wrapped around a 
convergence strategy for voice and data 
transport over IP. 

NEON may not sound like a terribly 
innovative approach, given that most of 
NEC's competitors in both the data and voice 
worlds have embraced similar strategies. 

NEC believes it does have a leg-up over 
its data communications equipment vendor 
competitors, in that being a predominantly 
telecomms equipment manufacturer, it has 
a better idea of how to build in quality of 
service for voice communications over an IP 
network. But then, so too do most of its 
telecomms competitors. 

Perhaps the differentiator is in NEC’s 
emphasis on migration to IP, as opposed to 
forklift upgrades, with NEC’s national 
manager for strategic marketing, Corporate 
Network Solutions, Milton Purcell, saying 


le 


that by 2004 there will still be more than 
60% of companies using traditional key 
telephony systems. 

Then there’s also the vendor’s insis- 
tence that it will be able to scale projects 
from SMEs to large corporates. 


© © NEC believes it does have 
a leg-up over its data 
communications equipment 
vendor competitors... 
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NEON comprises a multi-layer app- 
roach, starting with solutions including 
business applications, telephony and voice 
over IP, servers, multimedia (via Maxi), net- 
work operations centre, support, call centres, 
and a number of solutions that it sources 
through partners. 

The next layer is professional services 
(consulting, systems integration and out- 
sourcing), and overlaying that is NEC’s 
Information Superhighway (NISH) — a 


backbone network that stretches from 
Western Australia to Queensland. The 
NISH also forms part of the next layer, 
access, as does NEC’s Access business 
(DSL/VPN/Wireless), together with part- 
ners Optus, Telstra and AAPT. 

Atop that is a range of CPE/LAN 
devices, and surrounding the whole is a 
series of network management offerings 
under the NECare brand. 

The sorts of things this allows NEC to 
do for its customers include meeting 
demands ranging from customers wanting to 
keep their PABX until obsolescence, others 
wanting to deploy an IP-enabling infrastruc- 
ture, and yet others wanting to move into a 
full-blown IP telephony environment. 

Or customers may want to rent, for 
example, a call centre infrastructure from 
NEC, or voicemail capabilities, a help desk 
or a knowledge base. 

NEC has signed about 48 partners to 
NEON, including both software developers 
and OEM hardware solutions providers. Ml 
Pamela Clark-Dickson 
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Blue-rire $ Hatchery into Greater Operation 


Incubators 


The run-up to an election is proving fruitful 
for local developers (a scan through the briefs 
will give you a few more examples), with the 
continuing announcement of the recipients 
of the Federal Government’s Building on IT 
Strengths (BITS) Program — including $6 
million for the BlueFire Group Incubator. 
With the announcement of the fund- 
ing, BlueFire has also welcomed in its latest 
incubatee or ‘egg’, SecurelP, a local start-up 
entering the burgeoning managed security 
space. SecureIP, which according to founder 
and managing director Tony Delaveris has 
been up and running for more than 18 
months, initially commercialised its prod- 
ucts through loans from family and friends. 
“We're aiming to offer, for hundreds 
of dollars a month, what others would offer 
for no less than thousands,” Delaveris said. 


Delaveris says his company has spotted 
a niche market that the multinational security 
companies may not be able to include, as 
their products start with such a high level of 
security that the cost is often out of reach. 


© ¢ _ ...the incubator had 
investigated over 300 different 
Opportunities for investment. .9 9 


“We'll customise a solution for each 
customer model and identify exactly what 
it is they want to do,” Delaveris said, 
adding that this would also determine what 
level of security they would need. The 
company is partnered with and licenses 
technology from Symantec, DominoHost- 
ing and Sphere Digital. 

The company has built an expand- 
able secure hosting facility, with a current 


capacity for 37 racks, which SecureIP was 
proud to say was close to capacity at 35. 
Phase 2 — which will be partly facilitated 
by the BITS funding — will include a new 
55 rack capacity room. The facility fea- 
tures redundant links into Telstra, Optus 
and Powertel. 

Bluefire Group was championing its 
successful role in incubating Australian IT 
at the announcement of its funding (with IT 
Minister Senator Richard Alston), pointing 
at the successful example of on-line sand- 
wich delivery business, sandwich.com, 
which with a simple business model was 
expanding its business into the US. 

The Bluefire Group had been working 
with sandwich.com for the about 18 months 
— and according to CEO Ryan Glick the 
incubator had investigated over 300 different 
opportunities for investment before settling 
on the ones it has made. i David Masters 


ADC Firm in 36 Stakes 


OSS 


ADC's Singl.eview combined OSS/CRM 
suite, apart from having a large amount 
of its development attributable to the 
Brisbane operations, is a growing presence 
on the 3G horizon following a number 
of contracts, including the worldwide 
Hutchison 3G account. 

Hutchison 3G will implement the 
convergent billing system initially in Italy, 
followed by the UK, and later the deploy- 
ment will reach every country where Hutchi- 
son Whampoa has 3G interests — including 
Australia. The system will be integrated 
with other systems including Chordiant and 
E.piphany, who were recently announced as 
the CRM providers for Hutchison, and in 
terms of effectively integrating billing and 
CRM systems, Terry Woodcroft, product 


manager SSD Product Development believes 
ADC’s got a good jump on most. 

“Because we have our own CRM, we 
understand the issues very well, such as {that} 
the product catalogue and who owns the 
customer and all of those sorts of things are 
critical to work out up front,” Woodcroft said. 

Hutchison have also selected Intec 
Telecom Systems to provide convergent 
mediation and intercarrier billing, and have 
a unique situation where they will take the 
same integrated platform worldwide with 
their 3G rollout. 

According to ADC’s regional sales 
manager, Andrew Fisher, time to market is 
going to be essential and this is the strategy 
that the company has been working 
towards, through recent acquisitions and 
OEM agreements, to provide an integrated 
suite the company calls Singularit.e. 


“ADC's acquired three pillars to get- 
ting a service out quickly: first and most 
obvious is billing, the next is activation and 
then the quality assurance. 

“Once you've got those three pillars 
in place, you’re pretty well placed to launch 
and supply services very quickly . . . you 
can buy a lock, stock and barrel concept,” 
Fisher stated. 

But he also added that the luxury of 
a fresh site, such as Hutchison 3G or Virgin 
Mobile (another recent win for the company), 
is a bit of rarity — but that the company’s 
solution would mould to fit the legacy inte- 
gration model. 

“At the same time we realise that the 
lock, stock and barrel approach is a bit of a 
greenfields vision, and you're often not 
going to have the luxury to do that,” Fisher 
added. m@ David Masters 
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Evaluating Components for your Apps 


David Williams 
looks at third-party 
components 
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hose who have been writing software for a 

‘long time’ (in IT terms, more than five 

years) will have undoubtedly observed a 
particular phenomenon. Programming languages 
have moved from being completely separate and 
non-interchangeable - COBOL, FORTRAN and 
Pascal for example — to today’s Visual Studio.NET 
where the underlying language has almost become 
irrelevant; the development environment and 
platform providing the raw functionality. 

Much of the credit for this can go to software 
components — entirely self-contained, language 
neutral, objects which embody useful functionality. 
Do you require a grid on your screen, which fills 
itself with data automatically from a database 
table? Just drag and drop a component onto your 
form. Do you require report-writing abilities, with 
a print-preview option? Just drag and drop a com- 
ponent onto your form. 

Components are different from applications 
in that they are the essential building-blocks of 
the application itself. They provide a discrete set 
of functions that can be used by the application 
(indeed, any application) over and over again. In 
fact, any given application contains even hundreds 
of components — every GUI item like buttons and 
combo-boxes are components. Business logic to 
perform validation on data entry or write to a 


database may well be components. This certainly 
is a change to 30 years ago where computer soft- 
ware was a collection of massive amounts of code 
developed using a line editor! 

Initially, components were very much tied to 
a specific development environment. Visual Basic 
programmers had VBX’s — Visual Basic Extensions 
— available to them, whereas Delphi programmers 
used _self-registering DCU’s — Delphi Compiled 
Units; and, of course, Java had its own class files. 

These days, components are mostly imple- 
mented not with reference to a specific language, 
but with reference to the underlying operating 
system platform and its technologies. 

For Windows people, this typically means 
COM and ActiveX. The development environment 
contains complete support for these technologies, 
and suddenly the hyperlinked label or font selecting 
combo box that you love to use with Visual C++ 
works for you just as well and just as easily 
in PowerBuilder. 

Components are very much an area of soft- 
ware development that programmers should hold 
in their arsenal. A plethora of useful, debugged 
and working functionality — grids, text editing, 
database accessibility, report writing, GUI 
enhancements and integration with legacy sys- 
tems, among other things — exist for you already. 
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ByVal lpString As St 


This can speed your development time 
immensely as well as enhance the quality of the 
applications you produce. Although, mind you, I 
did once read a humorous article about the prolif- 
eration of components, which asked just how many 
mission-critical 24x7 applications contain bits of 
code from pot-smoking hippies around the world! 

With this in mind, how can we be sure a 
component is useful and is worth using, let alone 
worth paying for, if it has a fee? Here is my list of 
important considerations. 


Licensing and Redistribution 


Almost every component is freely redistributable 
— after all, they have been developed to drop into 
programming environments — but all the same, 
you should verify that this is the case. Some com- 
ponents can be used to develop with, but require 
licensing for distributing the run-time version of 
the component with your code. 

Further, licensing may also affect how many 
developers can use a component at the same time. 
If you are cutting code by yourself, this may not 
be an issue — but IT departments in corporations 
will need to keep this in mind. 

Often a component comes with single and 
multi-user license arrangements. Just as you can’t 
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3rd party components 


buy one copy of Windows and install it all over 
your network, you often can’t buy one copy of a 
component and give it to all your developers. 

Commonly, components are thought of as 
solely a Windows issue; yet, a component is really 
just a ‘black box’ bundle of functionality. The 
Unix community has long benefited from online 
code, such as ‘readline’ and other routines that can 
be used to enhance software, and these can really 
be thought of as components. In these cases, licens- 
ing is generally not a restriction because of the 
prominence of the Free Software Foundation’s 
‘copyleft’ philosophy. Nevertheless, components 
stand to become a bigger issue in the future on 
Unix platforms, thanks to the introduction of Bor- 
land’s Kylix and its component library for cross- 
platform (CLX). In fact, Borland’s intention is that 
CLX components will be transportable even across 
platforms — between Windows and Linux. 

Following on from this issue of licensing, is 
the component easily isolated and redistributed (a 
single OCX or DLL, for example) or does it have 
a cumbersome setup, which you will need to run 
on any target machines which your software is 
installed onto? 

Ideally, any component you have used in 
your software should be entirely transparent to the 
end-user. Your users should never see any pop-up 
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messages that you didn’t program; they should 
not have to enter special license keys for the 
components, in addition to your own program, 
and so forth. 


Source code 


Does the component come just in binary form, 
or is source code available? If so, is there an addi- 
tional fee? 

This is an important consideration for sev- 
eral reasons. Firstly, you may lose the ability to 
use the component if you upgrade your develop- 
ment environment and the source code is not 
available to you. Delphi users may well remember 
how Borland radically changed the component 
library facilities from version 2 to version 3. The 
changes meant that any Delphi 2 programmer 
had to either get a new version of their favourite 
components from the vendor, or re-compile the 
component into the new version 3 format — which 
was only possible if the source code was supplied. 

Source code also matters because the compo- 
nent you want to use may not have adequate docu- 
mentation or online help. In this case, the ability to 
open the source code and determine just what 
methods are available, the parameters they take, 
and other snippets of information are invaluable. 

And remember, most programs contain 
bugs somewhere. Components are no exception to 
this. If you find a bug in a component you use, 
you can often contact the vendor for support. Yet 
what happens if the author stops supporting a 
component and you are left with an orphaned 
piece of code that you can’t open up to try to 
repair, yourself? 

To my mind, having the source code avail- 
able is very important — even if you never actually 
use it yourself. It can at least provide a ‘peace of 
mind’ in case these situations arrive. 

We will look at some component distribu- 
tion Web sites later, but it’s worth mentioning 
here that some of the larger sites like Compo- 
nentSource offer a Source Code Escrow service with 
participating component authors. This means 
ComponentSource holds the source code in trust, 
and if the author ever stops supporting a compo- 
nent or fails to honour the terms of their licensing 
and support agreement, ComponentSource can 
release the source code to those who subscribe to 
the escrow service. Again, maybe you'll never ever 
need to open the source code yourself, but the peace 
of mind this can provide is often invaluable. 
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Table 1: Some ‘Top’ Components 


To help illustrate what we have been discussing, and to 
whet your appetite, here is a brief list of some of the 
best-selling components available at the moment. 


ActiveReports 

This component is specifically for Visual Basic, and 
allows you to generate a wide variety of reports from 
your application. It has a robust design-time environ- 
ment, including a report wizard, support for DAO, ADO 
and OLE-DB and VB events. The final reports are 
compiled straight into your VB application for 
increased runtime performance. 


Janus GridEx 2000 

This GUI component allows you to build your own user 
interfaces, similar to Microsoft Outlook. It provides 
tabs, button bars, tool tips and other user interface 
elements which duplicate Outlook's appearance, and 
which can be data-bound or unbound. Entire layouts 
can be dynamically saved and loaded from applica- 
tions, either to disk or from an Internet server. Finally, 
this component even supports multi-lingual sorting 
of text. 


SA-FileUp 

This component lets you upload files to an IIS Web 
server. This can be important if you want to receive files 
from a Web browser; for example, an attachment to an 
e-mail, a program to distribute on a shareware site, an 
error log for troubleshooting, or for many other purposes. 
SA-FileUp can transmit files of any format, up to 2Gb, 
from a user's hard drive to your Web server, via a Web 
page and browser. 


IP*Works 

This suite will help Internet-enable your applications, 
with components for e-mail, network management, 
file transfer, telnet and HTTP among others. Sample 
ASP pages are included, demonstrating how to use 
the components to access Web services such as 
stock quotes. 


TX Text Control 

The claim here is that you can build your own word 
processor. This component gives your application the 
ability to read, edit and create documents in several 
Microsoft Word formats. It supports HTML, tables, 
object linking and embedding, database access, bulleted 
and numbered lists, and so forth. It can act as a drag- 
and-drop target, so you can quickly drop text in from 
other applications. 


Pre-requisites 
Does the component require another component in 
order to work? If so, does it provide this component 
or must it be sourced (and paid for) separately? 

Information like this should generally be 
contained in a readme file or some other docu- 
mentation that comes with the component. 

Generally, this is not too common. Usually, 
a component may be able to take advantage of 
another component if it exists, and enhance its 
own functionality, but it is not common — and is, 
really, bad form — for the component to actually 
depend upon the existence of something else, out- 
side of the operating system level. 

Nevertheless, it is a consideration to keep in 
mind when evaluating components to use. 


Platform 


This is probably a ‘no-brainer’, but you need to 
check just which platforms the component has 
been developed for. After all, it’s no use trying to 
use a CLX component in Visual Basic, at this 
point in time. 

However, one consideration that may have 
been overlooked is whether you are likely to 
change your development platform in the future, 
or if you work in multiple environments, whether 
the component may be useful to you in other 
applications and environments than that which 
you first considered. 

In this case, if you’re a Windows’ program- 
mer, clearly an ActiveX-based component is going 
to be more ‘future-proof and versatile than a VBX. 

This may or may not be an issue to you, but 
it’s always best to be informed and to consider 
that your needs and requirements may not always 
be the same as they are now. 


Evaluation periods 


Clearly, you will want to test out a component to see 
if it meets your needs before you commit to purch- 
asing it. Be sure to find out just what the evaluation 
period of your component is, and what the con- 
straints are. Again, this sorte of information should 
generally be found in a readme file or some other 
documentation accompanying the component. 

Often a component will require a license 
key, which has to be stored in the Windows’ 
registry. If so, this may affect your redistribution 
of the component. 
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Often a component 
will display pop-up 
messages advertising 
itself, and the fact 
that it is a trial version. 


if 
+ 


3rd party components 


Another common situation is that a com- 
ponent will only function in its design mode, 
meaning you can use it and run your program 
from within your development environment, but 
until you register the component it will not 
work at all from within a compiled program, 
outside of this environment. 

Often a component will display pop-up 
messages advertising itself, and the fact that it is a 
trial version. Or indeed, the component may ran- 
domly alter data — for example, a grid displaying 
database results may well replace some of the grids’ 
cells with the name of the component vendor! 

These are all understandable; after all, you 
need to test the component before deciding to 
pay for it, and the author needs to be sure they’re 
not giving away the whole thing for free. Never- 
theless, they are important things to be aware of 
— especially because it could be possible you 
might mistake a message or a bug for simply 
a trial-period constraint, only to discover the 
message or bug continues when you release your 
final, licensed, product! 


Stress-test before using 


Test, test, test! This is something that can never 
be emphasised enough, whether an application in 
general or any other piece of code. Components 
are no different. 

The author of a component typically had a 
particular purpose in mind when they wrote it. 
Your needs and purposes may be quite different. 
You must test the component and its suitability 
to your needs before you freely deploy it with 
your code. 

Often, a component will come with a 
demonstration container program that lets you test 
all of the features of the program. This is important 
and helpful for seeing sample code, but also for 
making sure all of the methods really do run. 

However, even so, it is important that you 
make your own test cases. Put the component 
under stress. How well does it perform? Try to 
make it fail. Does it crash? Does it generate 
unhandled exceptions? Does it display dialog 
boxes and error messages onto the screen? 

Perhaps some of these circumstances or 
side-effects you can live with, but nevertheless, 
you need to be aware of them all. 

No software development publication can 
ever over-emphasise the need for rigour in testing, 
and this becomes especially important when you 


are introducing code developed by an unknown 
third-party into your application. 

What can we say but — put a component 
through the hoops before you commit to it! 

You can find more definitions of ways to 
test software than you ever would think possible at 
two Web sites: 
http://members.iinet.net/~lonsdale/seng/se20.htm 
and http://-faculty.erau.edu/towhid/def. html. 


Finding components 


Fortunately, and thanks to the Internet, components 
are easily found — both for specific languages and 
development environments, and just in general. 

Possibly the largest and best-known one- 
stop component shop is ComponentSource, at 
http://www.componentsource.com/. This is really 
an online component shopping site! You can view 
the realm of components available, add them to 
your shopping cart, and check out when ready. 

Developers can receive a regular free CD 
which contains an off-line version of the site, and 
trial versions of components. 

Component listings include platform, version 
and compatibility details, as well as the ability to 
download readme and help files separately from the 
component itself. 

Sites exist for particular development envi- 
ronments. One popular example is at the Delphi 
Super Pages (http://delphi.icm.edu.pl/) which 
provide components for Borland’s products — 
Delphi, of course, and also C++Builder and 
Kylix. Another popular example is VB Thunder 
at http://www.vbthunder.com/. 

You will also find components at: 
hetp://www.turbopower.com/, http://www.raize.com/, 
http://www.zonecorp.com/VB.Net/, 
hetp://www.melander.dk/ . . .). 

Next time you find you're wasting valuable 
time trying to solve a coding problem, consider 
that someone else out there on the Internet may 
well have solved your very problem, and it is 
waiting for you in a zip file. 

When visiting a component Web site, be 
sure to look for information that is important to 
you. Is the site easily searchable? Are components 
organised by category? Do they advise if source 
code is available? Does it display any user reviews? 


David M. Williams works by day as a troubleshooter for 
an international software company, and by night as a free- 
lance IT writer, programmer, database administrator etc. 
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Programming with 64-bit Machines 


Arithmetic Issues 


In last month's issue, 
Dr Carlo Kopp 
explored portability 
issues in transition 
from established 
32-bit hardware to 
64-bit hardware. 

In part two, he 
explores issues in 
machine arithmetic. 
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ew generation 64-bit machines, be they 

based upon RISC technology of variants 

of newer VLIW technology, will require 
some changes in programming technique. 

Machine arithmetic is a broad term used to 
describe the techniques used in hardware, and 
where applicable, microcode, to perform integer 
and floating point arithmetic calculations. 

Two parameters are of key importance to 
designers of arithmetic hardware (and microcode). 
These are speed and accuracy. 

Speed is simply a measure of how quickly 
the machinery can complete a specific category of 
arithmetic operation, such as an ADD, SUB, 
MUL, DIV, SHIFT or other operation. Obviously, 
the faster the better, and speed usually reflects in 
the price of the hardware. 

Accuracy is a measure of the error intro- 
duced as a result of the arithmetic operation. 
While many integer operations are exact, floating 
point operations are frequently inexact. 

To place this into context, digital computers 
manipulate binary numbers. The numbers we work 
with in our daily lives are decimal integers 
or fractions. We can represent a fraction exactly on 
paper, for example, 1/2, 1/4, 1/23 and so on, but if 
we are to represent them as decimal numbers the 
representation is frequently inexact. While 1/2 can 
be accurately represented as 0.5, 1/4 as 0.25, 1/23 is 
represented as 0.04347826 . . . which is not exact. 

Novices to the computing world frequently 
have difficulty with the idea of using a ‘represen- 
tation’ rather than the number itself. If the repre- 
sentation is good enough, the difference between 
the exact value and the representation should be 
small enough not to matter. 

Since computers perform arithmetic in 
binary, exact or fractional decimal representations 
have to be converted into a binary value before the 
computer can perform arithmetic. This is done by 
I/O software, for instance the ‘stdio’ library in ‘C’ 
which incorporates extensive format conversion 
routines for numerical I/O. 

Digital computers have inherent limitations 
in the size of the numbers which they can represent. 
Consider integer arithmetic on machines with the 
following word (integer) sizes: 

e 8 bits allows representation of integers 

from 0 up to 256. 

¢ 16 bits allows representation of integers 

from 0 up to 65,536. 

e 24 bits allows representation of integers 

from 0 up to 16,777,216. 


¢ 32 bits allows representation of integers 
from 0 up to 4,294,967,296. 
¢ 48 bits allows representation of integers 
from 0 up to 2.8 x 10", 
¢ 64 bits allows representation of integers 
from 0 up to 1.84 x 10”. 
If we aim to represent a number larger than the 
integer size of the machine, then we have to start 
playing tricks like using ‘double-words’ or per- 
forming the arithmetic using a software library 
which emulates decimal or other arithmetic. Alter- 
nately, we can avoid the problem by representing 
the number in floating point format rather than 
integer, and accept a loss in accuracy resulting from 
the conversion to a floating point format. 


Learn the Limitations 


The key to successfully mastering machine 
arithmetic, either as a designer or as a user of the 
machine, is to understand the limitations of the 
representation being used and the errors intro- 
duced by both representation and arithmetic. If 
these are understood well, then their impact on 
the behaviour of the algorithms in which these 
calculations are used can be objectively assessed. 

Why does this matter? Because poor man- 
agement of representation and arithmetic errors 
can produce no end of mischief in a program, or 
indeed in any system which uses that program. 

A very common problem is halting or 
exiting from a loop or iteration, in which a 
particular condition needs to be met. A trivial 
‘for’ loop in which an integer loop count ts 
incremented or decremented always behaves (if 
done properly). What happens however if this is 
a ‘do-while’ loop in which the equality of two 
floating point values is tested to determine the 
end of the loop (and halt)? 

The usual technique for such a test is to sub- 
tract the two values and see if the result is zero. In 
practice this method breaks, since subtracting two 
almost identical floating point numbers inevitably 
leaves some tiny residue, which is, of course, a non- 
zero value. As a result the program loops forever. 

Hardware for integer arithmetic is concept- 
ually simple. An arithmetic unit takes two integer 
values and using an appropriate collection of digital 
logic and embedded algorithm, produces the result 
of the calculation. An addition of two integers 
produces a bigger integer, a subtraction of two a 
smaller integer. Multiplication of two integers pro- 
duces an integer with twice as many bits. Simple? 


The usual technique 


for such a test is to 
subtract the two 
values and see if 
the result is zero. 
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Not quite. The problem we have to manage 
here is termed ‘arithmetic overflow’, and this arises 
when the result of the calculation is too big to rep- 
resent as an integer on the machine in question. 
Assume we aim to add 1111B and 1111B ona 4 bit 
machine. The result is 11110B which is too big to 
fit. This condition is termed an ‘overflow’, and a 
flag bit in the CPU is set when this occurs so the 
software can manage the condition. 

So far we have briefly looked at the limita- 
tions in integer representation on binary 
machines. Basically, the bigger the word size of 
the machine, the bigger the integers it can repre- 
sent. With few exceptions, a 32 or 64 bit 
machine can handle almost any problem we 
might need to tackle. The few exceptions are a 
class of their own. 

Floating point representation is a different 
game (look at David Goldberg's excellent tutorial 
“What Every Computer Scientist Should Know 
About Floating Point Arithmetic’ available at 
hetp://www.acm.org/). 

In floating point, a number is represented by 
the product of a fraction of two and a power of two, 
or M x 2". We call the fraction the ‘Mantissa’ (M) 
and we represent the power with the ‘Exponent’ 
alone since the value of 2 is redundant. 


Figure 1: Floating Data Points 


This is analogous to decimal floating point 
representation. An example binary floating point 
number might be 0.10111011001 x 2!" Floating 
point numbers are inherently inexact. This is 
because there are an infinite number of real num- 
bers between any two real numbers, yet we have a 
finite number of bits into’ which we can store the 
floating point representation of any real number. 

The floating point representation has two 
components, the mantissa and the exponent. The 
size of the mantissa determines how accurately we 
can represent the real number; the size of the expo- 
nent determines how large or how small a real 
number we can represent (Figure 1 and Figure 2). 

Most modern machines comply with the IEEE 
754 floating point standard. This standard supports 
four representations with differing accuracies: 

¢ Single Precision 32-bits — mantissa is 23 
bits, exponent is 8 bits, one sign bit. 

e Extended Single Precision >43-bits — 
mantissa is >32 bits, exponent is >11 bits, 
one sign bit. 

¢ Double Precision 64-bits — mantissa is 52 
bits, exponent is 11 bits, one sign bit. 

e Extended Double Precision >79-bits — 
mantissa is >64 bits, exponent is 15 bits, 
one sign bit. 


IEEE Floating Point Data Types 


0 22 23 


30 31 


Mantissa ( Fraction ) | Exponent 
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single precision floating point (IEEE 754 Standard) 


51 52 62 63 


Mantissa ( Fraction ) 


Exponent S 


double precision floating point (IEEE 754 Standard) 


Generic Floating Point Data Representation 
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Mantissa / Significand 


Value = Sign Bit * ( Mantissa * 2 4 Exponent ) 
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The actual size of the IEEE mantissas may be listed 
as one bit larger than cited, since the standard 
permits the use of an additional hidden ‘guard bit’ 
to improve accuracy. 

How large the error is in representing an 
arbitrary real number is determined by how many 
bits would be needed in a mantissa which accu- 
rately represents the real, against the actual size of 
the mantissa. Consider this example: 


Accurate representation is 0.111111111111 x 2° 
Actual representation is 0.11111111 x 2°. 


The difference is then in the last several bits of the 
number (0.000000001111 x 2°). Clearly the dom- 
inant bit in the error term is the left-most bit, 
after the 8 bits which represent the real number. 
The bits which foltow it are respectively 1/2, 1/4, 
1/8 (etcetera) the size of the leading error bit and 
are thus less important. 

The obvious conclusion is that the last bit 
in the floating point representation is the one 
which matters, since it largely determines how 
big the error between the representation and the 
actual real number is. 

Another issue of importance in floating 
point arithmetic is the idea of ‘normalisation’. A 


Figure 2: Graphical Representation of Floating Data Points 
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normalised floating point number is one in 
which the bit before the binary point is zero. An 
arbitrary floating point number is normalised 
by shifting the point either left or right until 
the first bit following the binary point is ‘1’, 
while the exponent is either decremented or 


incremented by the number of bits in the shift 
operation. Normalised representation is useful 
since it maximises the number of valid bits in 
the representation, and thus makes the best pos- 
sible use of the bits in the mantissa. 

Very frequently, the accuracy of even single 
precision floating point arithmetic is adequate for 
the purpose at hand. C compilers will typically con- 
vert all single precision float variables into double 
precision, simply to preclude any problems arising. 

Accuracy does however become quite critical 
in calculations which manipulate small numbers, 
especially where these tend to zero. Many algo- 
rithms used in matrix arithmetic rely on bits being 
zeroed in the calculation, and residual errors can 
interfere with the behaviour of the algorithm. 

Adding two floating point numbers can pro- 
duce interesting effects. If the exponents of the two 
numbers are the same, and both are normalised, 
then the two mantissas are added, and the result is 
then renormalised. At most, the renormalising 
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2" Values with Exp= 3, clgn = 1 
2" Values with Exp =2Z, Sign =1 
2" Values with Exp =1, Sign =1 
— 2% Values with Exp =0, Sign=1 
— 2" Values with Exp= 1, sign = 1 


—— | 


2" Values with Exp =i2, Sign =0 
2% Values with Exp =i1, sign =0 
2’ Values with Exp =0:, sign=0 
2" Values with Exp=|1, stgn=0 
——— 2" Values with Exp = 2, Sign =0 
——— 2% Values with Exp =3, Sign = 0 
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Floating point 
multiplication 
operations are 
more forgiving, 
mostly. 


28 


operation chops one bit off the end of the result 
mantissa, producing little impact on accuracy. 

What if the two numbers to be added 
differ largely in relative size? An example might be 
one number with an exponent many times 
larger than the other. To perform an addition, the 
binary points in these numbers must be aligned. 
This means making the value of both exponents the 
same, by ‘denormalising’ one or both numbers. Con- 
sider a trivial case in which the mantissa is 8 bits 
long and the exponents differ by 7. Denormalising 
the smaller number will result in seven right shifts 
which will push seven of the significant bits in the 
number out of the mantissa altogether. From an 
intuitive perspective, this is simply because the 
smaller number is similar in relative magnitude to 
the least significant bit in the larger number! 

This effect is termed ‘underflow’. The finite 
size of the mantissa can produce a situation where 
the smaller of the two numbers being added (or 
subtracted) is effectively reduced to zero. The fix 
for this is to use a larger mantissa, if possible. 

A related effect with similar consequences 
can also occur where multiple or chained additions 
of operands must be performed, where the operands 
differ greatly in relative size. 

This is best illustrated by example. 
Assume that a dozen operands need to be added 
together. Assume then that these are sorted by 
relative size, starting with the largest and ending 
with the smallest. 

First we perform the addition by starting 
from the largest operand and finishing with the 
smallest one. The first two numbers are added 
producing a partial sum, which is larger than 
either of the two operands added to produce it. 
Adding the third operand to the partial sum, 
we find that the error in the addition is larger 
than it would have been had we added the third 
operand to either the first or the second 
operand. Indeed, adding from the largest to the 
smallest we find that the difference in size 
between the parcial sum and the next operand 
keeps increasing, and the error in the calcula- 
tion gets increasingly larger. 

On the other hand, if the summation of the 
operands is performed starting with the two 
smallest operands, the size of the partial sum rela- 
tive to the next operand to be added is minimised, 
and the error is thus minimised. 

The important caveat here is that the 
order in which floating point operands are 
added does matter and programmers who fail to 


heed this reality will get bitten. It is unsafe to 
assume that a compiler or library will have the 
smarts to reorder operands in a multiple or 
chained summation. Indeed, at compile time 
there may be no obvious cue as to the relative 
size of the operands. 


For the Developer 


The cautious programmer will explore the dataset 
before coding to see whether such a problem might 
arise, and if need be, then write the algorithm 
to sort the operands by size and then add them in 
the proper order to minimise the resulting error 
in the calculation. 

Floating point multiplication operations are 
more forgiving, mostly. When the two nor- 
malised mantissas are multiplied out and the 
exponents are added, the mantissa in the result 
will inevitably have leading zeroes. The number 
therefore needs to be renormalised again. While 
ordering in a multiplication does not matter, the 
multiplier hardware should include an extra guard 
bit to preserve the least significant bit of the result 
before it is renormalised. 

Programmers often neglect the effect of 
error scaling, which arises whenever two floating 
point numbers are multiplied. A trivial example is 
where a real number which is represented in float- 
ing point format, and the representation is inex- 
act. For the purpose of argument, let us assume 
the error is precisely one half bit. If this number is 
multiplied by say 16 or 65536, then that error is 
also multiplied in size exactly 16 or 65536 times. 
Where the error in a floating point representation 
does in the calculation, and the number will be 
multiplied by numbers much greater than one, 
some thought should be given to the scaling of 
error magnitude. 

While the oddities of addition and the lim- 
itations of binary representation are the most 
obvious problems which might be encountered, 
they are not the only ones. 

A frequent problem which might arise is 
‘divide by zero’. In the world outside digital com- 
puters, dividing any finite number by zero yields 
infinity, which cannot be represented on a digital 
computer (or arguably in any finite form). 

Floating point hardware is usually designed 
to detect a ‘divide by zero’ condition. Typical 
floating point hardware will identify operands 
which are inappropriate as ‘Not a Number’ or 
NaN. The hardware will then cause a trap or an 
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exception to a piece of code which handles the 
condition. A core dump or BSOD may follow. 

Most of the gotchas in programming with 
floating point arithmetic, or integer arithmetic, 
described are classical ‘show stoppers’ and will cause 
the malfunction or indeed crashing of a program on 
an arbitrary piece of hardware, whether it is 16-bit 
10MHz clunker or a 1.8GHz 64-bit hot rod. Most 
hardware built over the last decade conforms either 
completely or largely to the IEEE 754 standard. 

The IA-64 for instance nominally meets 
IEEE 754 with a single, double and extended 
double precision format, the latter with a 64 bit 
mantissa and 15 bit exponent, occupying a full 
80 bits for the operand. 

The key caveats with numerical computing 
always apply, and a well-written application 
should typically port across architectures with no 
difficulty. It does, however, pay to carefully vali- 
date the robustness of an algorithm or a library 
when it is ported across hardware boundaries to 
ensure that no mutually disagreeable assumptions 
were made at either end. 
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In terms of maximising application perfor- 
mance, where high levels of numerical accuracy 
are required in the arithmetic, there is no trivial 
answer. The behaviour of the application should 
be carefully explored, and if the algorithm can be 
manipulated in a manner which improves 
Instruction Level Parallelism over short runs of 
instructions, the odds are that some performance 
gain might be realised. 

Since these days numerical computing and 
the finer points of floating point arithmetic (pun 
intended) are usually taught as electives in Uni- 


versity Comp Sci and Engineering courses, begin- 
ners in this area are cautioned to tread carefully. A 
bit of reading up before one starts coding can save 
a considerable amount of heartache. 


Dr Carlo Kopp is a former computer design engineer, 
embedded programmer, Unix systems programmer and a 
Unix systems consultant, with over 15 years of industry 
experience. He currently lectures in Computer Science 
at Monash University. He may be reached via carlo@- 
pha.com.au or http://www.csse.monash.edu.au/~carlo . 
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Ph: (02) 9906-6263 Fax: (02) 9906-6327 


www.hummingbird.com 
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Andrew Parsons examines the is r : q 
changes made to error handling 
in Microsoft's Net Framework. _ 
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ne thing that is essential when pro- 

gramming, regardless of language, is 

to ensure that your application handles 
every conceivable situation. To that end, pro- 
grammers must endeavour to think how a user 
could misuse their software just as much as using 
it properly. 

Also, since PCs can be so utterly different, 
your program must be able to handle unexpected 
configurations of both hardware and software 
(particularly the operating system). Most of all, 
professionally built applications must handle 
these situations gracefully. 

To combat the unexpected, or the situa- 
tions where the system isn’t in the state your 
application needs, programmers need to resort to 
exception handling. On the Windows platform, 
exception handling hasn’t been great, particularly 
for Visual Basic. 

However even Visual C++, which does 
have a form of structured exception handling, 
has problems due to the underlying nature of the 
operating system and other interfaces that are 
commonly used by programmers. 

In the .Net Framework, Microsoft has 
addressed this with a common solution for 
exception handling in all of its languages. Most 
importantly, the new technique is supported and 
actively used by the entire .Net Framework. 
What this means is that not only do all .Net lan- 
guages have the ability to perform much better 
error handling, but that the error handling itself 
is going to be much more effective because the 
underlying technologies themselves have been 
designed with this in mind. 

Let’s take a look at how error handling is 
done in existing languages first, before we see 
how .Net brings programmers a much more sta- 
ble and reliable way of handling the unexpected. 

The language used by more programmers 
than any other in the world is Visual Basic. Its 
simplicity and ease of use and deployment makes 
it an attractive choice for programmers of all 
experience levels. 

However, despite VB now being in its sixth 
version (without even considering the versions of 
Basic that came before them), error handling has 
been poorly supported. Most programmers have 
to be satisfied with using one of two methods; On 
Error GoTo and On Error Resume Next. Let’s 
quickly review these two techniques. 

GoTo, a long time hated term in most pro- 
gramming circles, still remains in the VB language 
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set, and the only reason the majority of developers 
will even consider using it is for error handling. 

The statement used to implement this type 
of error handling is: On Error GoTo x, where x is 
a line number or line label. This turns error trap- 
ping on, and whenever a trappable error occurs, 
the program will branch to the specified location 
in the code. 

Specifying a line number of 0 turns error 
handling off. The usual practice is to define a line 
label which makes the code slightly more readable. 

While this may seem to be an acceptable 
method of error handling (which it is in VB6), it 
has many drawbacks. As we mentioned earlier, the 
GoTo verb is disliked by the majority of profes- 
sional programmers because it is said to promote 
sloppy coding practices, spaghetti code that is 
hard to maintain and can result in illegible code. 

However, when used correctly for error 
handling, On Error GoTo can actually make 
code more legible and easier to maintain. This is 
because the exception handling for a particular 
function or method can be placed in one location 
(usually at the bottom of the function). 

Besides the argument for not using GoTo, 
other drawbacks to this method include the 
inability to nest error handling. Also, gathering 
all of the errors that can occur in a function in 
one place can cause the code to be inefficient as 
the program needs to check against each error 
type that the application is handling. 

The other alternative in Visual Basic ver- 
sion 6 and earlier is the On Error Resume Next 
command. With this, the developer can allow 
execution to continue to the next line of code. 

Typically, this statement is used in con- 
junction with conditional code that executes if the 
Err.Number value meets certain error conditions. 
The only major difference between this and the 
other method is that the exception handling is 
done in-line right where the error occurs. 

A major side effect is that any errors that 
may occur that the program does NOT explicitly 
handle can go unchecked, causing major damage 
to your application data or worse. Professional 
programmers ensure they reset the error checking 
status using On Error GoTo 0 as soon as they’ve 
finished with the potentially problematic code, 
which results in code that is littered with On 
Error statements throughout. 

Neither of these methods is even remotely 
similar to true structured exception handling, 
and have been the bane of many VB developers. 


System.Exception Heirarchy 


Here are the main exception object 

types and where they fit into the 

.Net Framework. 

Object 

Exception 

ApplicationException 
CodeDomSerializerException 
InvalidPrinterException 
|OException 
IsolatedStorageException 
PathTooLongException 
CookieException 
ProtocolViolationException 
WebException 
MissingManifestResourceException 
SUDSGeneratorException 
SUDSParserException 
SystemException 
UriFormatException 
SoapException 
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System.SystemException Members 


System.SystemException Heirarchy 


| 


The SystemException class is the base class for 
many other more detailed exceptions. Here are 
the more common groups that can be handled. 
Note that even these exceptions have other, 
more specific exception classes underneath 
them. For instance, the ArithmeticException 
class has three other Exception classes derived 
from it: DivideByZeroException, NotFiniteNum- 
berException and OverflowException. 


Object 
Exception 

SystemException 
ArithmeticException 
ExecutionEngineException 
InvalidOperationException 
OverflowException 
SecurityException 
StackOverflowException 
TypeLoadException 
IndexOutOfRangeException 
InvalidAddressException 
InvalidCastException 
MissingFieldException 
NullReferenceException 


Each Exception class shares those members 
(properties, methods and events) of its parent 
class. In addition, some child classes provide 
extra information. 


Properties 

HelpLink — Provides access to the link to the help 
file associated with this particular exception. 
An application can retrieve or set this value. 

HResult — For those needing to know the 
nitty-gritty, the HRESULT value is stored 
in this property. 

InnerException — Returns a reference to the 
inner exception object. It is customary to 
include an exception that caused another 
exception to be thrown. In this way, it 
enables the consumer application to deter- 
mine why an error occurred and what the 
sequence of exceptions was. 


Message — The actual error message text. 

Source — An especially useful property, the 
Source string contains the name of the 
application or object that caused the error. 

StackTrace — Enables locating the position in 
the code where the exception was thrown. 

TargetSite — Retrieves the method that 
threw this exception. 


Methods 

GetBaseException — Retrieves the original 
exception that is thrown. 

GetType — Returns the type of the current 
exception. 

ToString — This method is used to provide a 
string representation of the exception. It 
includes the fully qualified name of the 
exception itself, and in most cases, the 
error message (from the Message property). 


In fact, some C++ programmers point to this as 
a reason why VB is an inferior language. 

As mentioned earlier, despite Visual C++ 
already having structured exception handling, if 
C++ programmers think they’re really better 
off, they need to really examine what’s going on. 

Visual C++ (prior to .Net) relies just as 
much — if not more so — on direct API calls. 
Windows API calls return straight error codes, 
and do not raise errors. This means the errors 
themselves can’t be detected using structured 
exception handling as implemented in VC++. 

In addition, all COM related calls return 
HRESULT values for C++ applications. This is 
unlike in VB, where VB itself converts these into 
runtime errors that can be trapped using the tech- 
niques already explained above. So, like API calls, 
COM method and property accesses also cannot be 
trapped using structured exception handling. 

Finally, C++ library errors and some runtime 
errors aren’t handled by structured exception han- 
dling either, and can result in memory exceptions. 

Combining all these things together 
shows that C++ programmers really don’t have 
something they can crow about when trying to 
prove their superiority over VB developers. They 
too, fail, because of the underlying technologies. 


The Solution: .Net 


We're told that .Net goes a long way to solving 
this for both C++ and VB programmers alike, 
whilst also giving C# and all other .Net compli- 
ant languages a good structured way of accepting 
and trapping errors. So the questions now are: 
how does it do this? and how does a programmer 
take advantage of this new technique? 

Right from the start of the Common Lan- 
guage Runtime’s (CLR) design, error and exception 
handling was included as an important aspect. All 
.Net Framework methods indicate failure by throw- 
ing exceptions that follow a uniform procedure. 

This shared method of generating errors 
allows each language to define its own syntax when 
handling the errors, while at the same time allows 
the exceptions to be handled without concern 
about which language generated the exception or 
which language is handling the exception. 

What this means is that a C# program 
could throw an exception following its own 
syntax, while a VB.Net service could be handling 
the error with the VB.Net style of catching errors 
without needing any translation. 
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Most DSL/Broadband 
providers don’t have 


the backbone for it! 


At FLOW Communications we have 
spent the past three years building 
a state-of-the-art network backbone 
enabling us to deliver reliable high- 
speed DSL/Broadband solutions. 


FLOW Broadband Solutions Offer: 
* Speed, in excess of ISDN and up to 
50 times the speed of dial up connections. 


* Reliability, through our network 
guaranteeing 99% network availability. 


¢ Accountability, our network operating 
centre’s 24 hour, 7 days a week monitoring 
with detailed reporting. 


* Convenience, uses your current phone line 


allowing simultaneous voice and data traffic. 


“1 feel the need 
for speed™” 


The FLOW network allows us to 
provide “Always On™” high-speed 
Internet access in a variety of packages 
designed for your business needs from 
SOHO to large scale applications. 


FLOW Communications range 
of solutions include: 

Web Hosting 

Virtual Private Networks 
Co-Location 

Virtual ISP 


Facilities Management 


Find out how FLOW can get 
your network racing call 
today on 1800 500 406 


Or visit www.flow.com.au 


@ 
OO@ 
@ 


soood”** FLOW 
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communications. 


SIMPLE SOLUTIONS IN A COMPLEX WORLD™ 
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‘vx Pioject! - Microsoft Visual Basic [design] - [Form] (Code}] 


Private sub Commandi_click() 


oim sFirstUine As string 
Dim obJFS0 As Filesystemobject 
Dim objTS As Textstream 


‘on Error GoTo Errortrap 


Set ObJFSO = New Ftlesystemabtect 
Set abjTS = obfFso.opentextrile("c:\Temp\Testrile. txt") 


with objTs 
sFirstLine = .ReadLine 
Msgox “First line 4s" & sFirstLine 


-Close 
end with 


set objts = 


nothing 
Set Ob}FSO = 


Nothing 
exit sub 


Errortrap: 
‘MsgBox “An error occurred: “ & Err.Oescription & ” (Error Number “ & Err.number & “)” 

End sub 

' 


Visual Basic Error Handling 


On Error GoTo 


A high proportion of existing Visual Basic applications would use the following method some- 
where in their sourcecode. It provides a pseudo-structured way of handling errors, but it uses the 
dreaded GoTo word. These three listings all do the same thing — open a file, read and display the 
first line and close the file. 
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Private Sub Command1_Click() 


Dim sFirstLine As String 
Dim objFSO As FileSystemObject 
Dim objTS As TextStream 


On Error GoTo ErrorTrap 


Set objFSO = New FileSystemObject 
Set objTS = objFSO.OpenTextFile(“C:\Temp\TestFile.txt”) 


With objTS 
sFirstLine = .ReadLine 
MsgBox “First line is “ & sFirstLine 
Close 

End With 


Set objTS = Nothing 
Set objFSO = Nothing 


Exit Sub 


ErrorTrap: 
MsgBox “An error occurred: ” & Err.Description & “ (Error Number ” & Err.Number & “)” 


End Sub 


This is one point that can’t be repeated 
enough: all .Net languages can natively catch 
errors from other .Net languages. No more 
analysis of HRESULT values, or return codes. 
No more special handling of COM objects. Just 
straight exception handling regardless of the 
source of the error. 

Because all .Net Framework methods 
throw exceptions to indicate an unsuccessful exe- 
cution, it is unlikely that the problem will go 
unnoticed as the developer needs to handle the 
error, if only to write code that ignores the error. 

This pro-active methodology is welcome 
in an industry where programmers need to 
check for return code values or forget to code 
error handling and allow bad data to proliferate 
throughout an application. 

As a side note, Microsoft claims that the 
CLR’s exception handling is faster than Win- 
dows-based C++ error handling. This could be 
another benefit, but we haven’t seen proof at this 
stage and it would be particularly interesting to 
see how it compares on lower-end machines. 

Creating your own errors has been made 
easy too, and since this style of exception han- 
dling is preferred over the old style of setting 
and checking return codes, this is a welcome 
inclusion to the .Net Framework. 

Even better, with the .Net Framework 
comes a special interface called the COM 
Interop. This is the mechanism that allows .Net 
languages access to COM objects. When the 
CLR detects HRESULT values after a COM 
object method call, it translates those that indi- 
cate failures into true .Net Exceptions, thus 
allowing the code to remain consistent even 
when interfacing to legacy COM objects. 

The access to the Windows API remains as 
is, however since direct API access should be dras- 
tically reduced in all .Net languages, this should 
affect fewer developers than it would first appear. 

There is an exceptional amount of detail 
on how the CLR actually manages exceptions, 
but what is essential to the management is that 
when an exception occurs, an Exception object is 
created. The Exception object can be of any class 
that inherits from the System.Exception class. 

This object is passed up the program stack 
until the program handles it, or the program 
itself ends. Obviously, unless a programmer is 
happy for his/her program to crash whenever a 
failure occurs, the application must handle the 
exception when it happens. 
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The .Net 
indicates that an application can throw any 


Framework documentation 
object that derives from the base Object class as 
an Exception, but recommends (and any sane 
developer will listen to this recommendation) 
that only Exception objects (and its deriva- 
tives), should be thrown. 

The Exception class adds several properties 
to the base Object class, including a StackTrace 
value that gives an insight to where an error 
occurred. If the executable contains debug infor- 
mation, the source file name and line number are 
included here. 

Another useful property is the InnerExcep- 
tion property. This property is of the Exception 


On Error Resume Next 
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class itself, and allows an Exception to include a 
previously caught exception when it is thrown, 
thus providing a history of what may have caused 
a particular error. 

The other question we asked was “how 
does a programmer take advantage of this new 
technique?” There are two parts to the answer — 
how to handle errors that may occur, and how to 
create user-defined exceptions. 

C# and VB.Net handle errors with very 
similar syntax — the Try — Catch 
ture. In VB.Net, this looks like: 


Finally struc- 


Try 


‘try to do something Continues ... 


Visual Basic provides programmers an easy way of ignoring errors. How many other languages would be that helpful? Obvi- 
ously, Microsoft came to their senses and changed error handling so this couldn't happen. (see Try ...Catch ...FINALLY!) 


Private Sub Command2_Click() 

Dim sFirstLine As String 

Dim objFSO As FileSystemObject 
Dim objTS As TextStream 

Set objFSO = New FileSystemObject 


On Error Resume Next 


Set objTS = objFSO.OpenTextFile(C:\Temp\TestFile. txt’) 


lf Err > 0 Then 


MsgBox “An error occurred in open: “ & Err.Description & ” (Error Number “ & Err.Number & ")" 


Else 
With objTS 
On Error Resume Next 
sFirstLine = ReadLine 
lf Err > 0 Then 


MsgBox “An error occurred in read: “ & Err.Description & “ (Error Number ” & Err.Number & “)" 


Else 
MsgBox “First line is “ & sFirstLine 
End If 


Close 
End With 
End If 


Set objTS = Nothing 
Set objFSO = Nothing 


End Sub 
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‘nProject! = Microsoft Virual Basic 


[design] = [Foul (Code)} 


iA! 
Teiiect: Posen st Projent 
4 oa 


Private sub Command2_click() 


bia spicing AS St 23 Project (Project 
bIFSO AS eH esystenobjecc Ferm (renmt frm) 
EH 0b TS As Textstre 
Set obJFS0 = New Filesystemobject 
on Error Resume Next 
Set objTS = objFso. opentexted le("C:\Temp\Testr ile. txt") 
If err’> 0 Thi 
‘MsgBox “An error occurred in open: " & Err.escription & ” (error Number  & Err. Number 
els 
with objTs 
on error Resume Next 
sFirstine = .Readiine 
if err > 0 Then 
1 eqht8980" "An error occurred tn read: " & err.pescription & * (error number ” & Err [1s {sspuesssseses| 7 
Else 
MsgBox “First line is" & sFirstLine xs 
end 
lose Aphabetic | categorized | 


Set hits Nothing 
Set = Nothing 


End sub 


Ignoring errors in VB — No longer in C# and VB.Net 


FINALLY! 


Try... Catch... 


Finally, a truly structured way of handling exceptions. The new Try - Catch - Finally block sup- 
ported by all .Net languages provides a way of making code maintainable and legible while at 
the same time adding functionality over existing methods such as nested error handling. 


Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.Even- 
tArgs) Handles Button1.Click 
Dim sFirstLine As String 
Dim sr As |0.StreamReader 
Try 
Try 
= |0.File.OpenText("C:\Temp\TestFile.txt’) 


Try 
sFirstLine = sr.ReadLine() 
Catch ex As Exception 
MsgBox(“Couldn’t read the first line”) 
End Try 


MsgBox(“First line is “ & sFirstLine) 
Catch ex As Exception 

MsgBox(“Couldn't open the file”) 
End Try 


Finally 
Try 
sr.Close() 
Catch ex As Exception 
MsgBox("Couldn’t close the file”) 
End Try 
End Try 
End Sub 
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Continued . . . 


Catch ex As Exception 

"do something with the error 
Finally 

‘ this code is executed whether an error occurred 
or not 
End Try 
In C#, the code is quite similar: 
try { 

// try to do something 
} 
catch(Exception ex) { 

// do something with the error 
} 
finally { 
} 


The Catch phrase is used to indicate what errors 
are handled. Using the generic Exception type as 
we've done in the above examples catches all 
exceptions. However, the application can catch 
specific Exceptions by replacing the base Excep- 
tion definition with the more specific name of the 
Exception that needs to be caught, for example, 
DivideByZeroException. 

In addition, if multiple errors could occur, 
multiple Catch statements can be coded, one 
for each type of error that needs to be handled. 
For example: 


Try 

x=x/0 
Catch dbzex As DivideByZeroException 

MessageBox “The Error we expected” 
Catch fnfex As MissingFieldException 

MessageBox “This Error should never occur” 
Catch ex As Exception 

MessageBox “This shouldn't happen either, but 
you never know" 
End Try 


One advantage VB.Net has over other languages 
is the ability to use User-Filtered handlers. The 
filter expression is coded in the When clause of 
the Catch statement: 


Catch ex As Exception When myvariable = 0 


This allows the exceptions to be caught only if 
the When clause is true. 

It works differently in .Net, though. To 
create a custom exception in VB.Net, define a 
class, and inherit the ApplicationException 


object, like this: 
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Public Class SystemDeveloperMagazineException 
Inherits ApplicationException 

End Class 

In C#, you do the exactly the same thing: 

public class SystemDeveloperMagazineException : 
ApplicationException 

{ 

} 


Your exception object should include three 
different constructors so they match the stan- 
dard .Net exception classes, and in C#, this 
looks like: 


public class SystemDeveloperMagazineException : 
ApplicationException 
{ 
public class SystemDeveloperMagazineException 
{ 
} 


public class SystemDeveloperMagazineExcep- 
tion(string message) : base(message) 

{ 

} 


public class SystemDeveloperMagazineExcep- 
tion(string message, Exception innerexception) : 
base(message, innerexception) 
{ 
} 
} 


Coupled with creating your own Exception classes 
and objects, you can also manually throw these 
exceptions or any of the standard .Net exceptions 
so that your application’s consumers can receive 
the errors. 

This is easily achieved using the Throw com- 
mand which usually has the following structure: 


Throw New ExceptionType([additionaltext],[innerex- 
ceptionobject}) 


Despite being able to create and trap your own 
exception objects, the fact remains that most 
applications will find it sufficient to trap various 
errors already exposed in the .Net Framework. 
Diagram 1 shows the general Exception 
classes, and where the SystemException object 
fits in. Diagram 2 provides more detail on the 
SystemException object and its subordinate 
classes. As intimated in these two diagrams, 
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there is a huge range of specific exceptions that 
can be caught — way too many to cover here. 

Developers should review the latest version 
of MSDN for the complete list and try to use the 
most specific exception for a particular case; and 
you should use DivideByZeroException in prefer- 
ence to ArithmeticException or SystemException. 

Don’t forget the Finally clause. Any code 
contained in the Finally block is executed 
regardless of whether an error occurred or not. 
This is especially useful when the application 
needs to perform cleanup, like closing files. 

Obviously, Structured Exception Handling 
is going to take a bit of getting used to, especially 
for those developers who like to turn error handling 
off and fly by the seat of their pants. However, the 
benefits should also be obvious, and if not, take a 
look at what some of Microsoft’s own employees 
think about it (see Sidebar: Microsoft’s Say). 

Get your nose into MSDN and investigate 
this aspect of the new .Net language environ- 
ment. The sooner you understand it, the sooner 
you'll be able to capitalise on better coding prac- 
tices as well as knowing that others will find 
your source more legible. 


Andrew Parsons is an Australian-based writer and 
Visual Basic programmer. He has been a professional 
programmer for 12 years, with the last three being 
devoted to Visual Basic. 
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Microsoft's Say 


Two of Microsoft's .Net developer evange- 
lists, Matthew Hardman and Charles Sterling 
spoke to the author about .Net Structured 
Exception Handling. 

In summary, they saw three main advan- 
tages with the new methodology: 

e More control over errors: The old way of 
doing things, particularly in Visual Basic, 
led to clumsy coding techniques and less 
legible code. The On Error GoTo ErrorTrap 
method caused error-handling code to be 
separated from the actual instance of the 
error, and resulted in the ungainly 
Resume command being used. 

e The new Try-Catch-Finally structure lends 
itself to good coding, whilst the traditional 
approach actually lends itself to bad 
coding. A common practice for VB pro- 
grammers is to actually turn error checking 
off using the On Error GoTo 0 statement 


and then checking the Err object for any 
errors they're interested in. 

This is actually the reverse of what should be 

happening, so the new process is a welcome 

inclusion as it finally strongly encourages 
better coding practices. 

e The traditional methods of exception 
handling weren't cross-language com- 
patible. Now, an error occurring in a C# 
application can be caught and dealt with 
in VB.Net just as easily as if it were a 
native VB.Net error. 

They said the new process provides a huge 

opportunity for more maintainable and legible 

code. The error handling itself can be kept close 
to where the exception might occur, the lan- 
guage encourages programmers to follow the 
standard exception handling rather than trying 
to avoid it, and it allows cross-language com- 
patibilities where there weren't any previously. 
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@ Sort, extract, 
transform, load. 


@ Portal gadgets 
for SAP. 


In CoSort with Intel 


The CoSort company announced its symmetric multi- 
processing (SMP) CoSort sort and extract, transform, 
load (ETL) acceleration software for Intel Itanium 
processor-based server platforms running Debian — 
with other operating system releases planned. 

With CoSort available for Itanium servers 
running Linux64, customers should see significant 
pre-load sort and ETL performance gains in very 
large database (VLDB) and warehouse/data-ware- 
house environments. 

The Explicitly Parallel Instruction Computing 
(EPIC) design of Itanium allows for breakthroughs in 
processing terabytes of data, speeding protected 
online transactions and processing complex computa- 
tions — and the CoSort package, featuring end-user 
and programmer interfaces to a parallel processing 
sort algorithm in a coroutine architecture, is set to 
take advantage of these new capabilities. 

Cosort has also announced support for 64-bit 
Windows 2000, the in-development Monterey64 as 
well as Linux64 operating systems running on the 
64-bit Intel architecture. 


CoSort: http://www.cosort.com 


Gadgets grow on Plumtree 


Portals 


Plumtree Software released the Enterprise Class 
Gadget Framework for SAP R/3, enabling SAP 
users to create Plumtree Gadget Web Services, to 
integrate SAP data into its Corporate Portal with- 
out coding. 

The SAP Framework connects to dynamic 
libraries of all objects and functions available within 
SAP, which gives SAP experts the ability to Web- 
enable the parts of SAP most important to their busi- 
ness, and customise deployment, rather than devel- 
oping a wide range of graphical Web services that 
have to be adapted to every customisation of SAP. 

A new wizard, the Framework Wizard, 
assists in the creation of Gadget Web Services based 
on SAP R/3 business data and processes, which can 
then be embedded in Plumtree’s personalised or 
community portal pages. The framework navigates 
the SAP Business Object Repository (BOR) using 
Plumtree’s Java BOR Connector (JBC), to connect 
to SAP through the SAP Java Connector. 

Plumtree has also announced the release of 
Plumtree Corporate Portal 4.5. 


Plumtree: http://www.plumtree.com 


Coding for Battle with Palm 0S 


Development Environments 


Code and Data is shipping Version 8.0 of the MetroWerks’ CodeWarrior for 
PalmOS development environment. 

New features of the CodeWarrior PalmOS tool suite include new Wizards for 
automating the creation of PalmOS applications and shared libraries, removing the 
complexity of starting a new project, while still allowing a high level of control. 

An enhanced C++ compiler has an expanded mode, which allows C++ 
virtual tables and exception tables to be moved into a storage heap, allowing 
larger C++ programs and giving the developer more room for global variables 
and dynamic data structures. 

Instant help is available for PalmOS questions as the Palm SDK documentation 
is integrated into the IDE and is accessible with a single key press. An expanded help 
menu provides direct access to the PalmOS SDK Reference, PalmOS SDK Compan- 
ion, the Targeting PalmOS Manual and several support Web sites. 

The debugging capabilities have been expanded to support USB debugging for 


both Palm and Handspring devices, supporting the function on Mac OS. 


CodeWarrioe for Palm OS 8.0 
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Code and Data: http://www.code.com.au 
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Propellerhead-Powered Portal 


Integration 


Tibco announced the availability of the Portal- 
Pack Developer initiative for partners and resellers 
interested in building and reselling a PortalPack 
for their applications, to integrate directly with 
the Tibco Active-Portal platform. 

The PortalPack Developer initiative 
allows partners to build pre-packaged portal 
application interfaces that are integrated into 
the ActivePortal ‘out-of-box’, to be plugged 
into the portal infrastructure without the 
complex task of writing to a variety of APIs to 
achieve integration. 

Those joining the PortalPack initiative will 
receive software, documentation, Tibco PortalPack 
development guidelines, discounted training, 
technical support and inclusion in Tibco market- 
ing programs. 

The PortalPacks, both Tibco and partner- 
developed, are aimed at enhancing the functionality 
of the portal deployment platform by integrating 
real-time third-party content, newsfeeds and 
interactive services. 


TIBCO: http://www.tibco.com 


New Java Support for Sybase 


Application Server 


Elantra Orfers Migration 
and Encryption 


Desktop Management 


Elantra began distributing two new products, a 
Windows 2000 migration tool from Connected, 
Connected TLM (Total Lifecycle Management) 
6.0; and a data encryption product from Aus- 
tralian software firm EncryptNT Technologies. 

Connected 6.0 supports more than 10,000 
PCs per server, allowing the seamless migra- 
tion of an Enterprise PC’s entire personality 
across Windows platforms. Data corruption is 
said to be minimised, and the time for migra- 
tion reduced from over a day to an hour or less 
as a result. 

The partnership with EncryptNT will see 
Elantra distribute its data encryption solution 
that works across fixed discs (including RAID), 
tapes, CD-ROMs, floppy discs, zip drives and 
other removable media. The solution offers a 
choice of 56 bit DES or the 128 bit IDEA engine, 
which is optimised for the Intel architecture. 


Elantra: http://www.elantra.com.au 


@ Encryption and 
platform migration. 


Bi Integration for 
portal developers. 


Sybase EAServer 4.0 provides full support for J2EE 1.3 to increase the 
application integration capabilities of the solution. In addition, the new 
version continues to support major standards for component deployment, 
including CORBA 2.3, COM and PowerBuilder, as well as the J2EE Con- 
nector Architecture API. 

Full support for J2EE 1.3 is provided, including support for Enterprise 
Java Beans (EJB) 2.0, updated connectors, an exposed Java Messaging Service 
(QMS) API, Web server plug-ins, unified install, and added Java Dynamic 
Management Kit (DMK) API. 

EAServer provides new support for Linux, in addition to versions for 
Microsoft Windows, Sun Solaris, HP-UX and IBM-AIX, providing developers 
with a wide range of operating platforms to deliver business applications. 

In addition, the EAServer 4.0 supports virtually any type of client, 
including CORBA, XML, HTML, DHTML, any ActiveX client, C and C++, 
and PowerBuilder. 


Sybase: http://www.sybase.com 
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Sybase’ EAServer 


‘The high-performance engine for e-Business success 


EAServer 4.0 
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reezing Out the Cyber Terrorists: 


A Networ 
Security Nightmare! 


new breed of network-propagating 
worms has joined Denial of Service 
(DoS) attacks and Distributed Denial 
of Service (DDoS) in causing disruption to our 
By Joe Magee everyday working life. The effect of these new 
threats has been financially disabling at worst, 


time wasting, nuisance value at best. 

Compounding this concern is the sudden 
increased focus on security as a result of recent 
events in the US. The stakes have risen. It is no 
longer just a matter of assessing what is required to 
make corporate cyber properly secure: susceptibility 
to cyber terrorism has become a security consider- 
ation for every organisation. 

It could be said that the recent increase in 
cyber attacks from virulent worms, such as Nimda, 
are attributable to a combination of increased band- 
width and the creativity of hackers in designing a 
worm that looked convincing as legitimate traffic. 

Before Nimda, the Code Red worm exploited 
a Web server vulnerability in order to use the servers 
it infected to attack others and launch DoS attacks 
via the Internet. DoS attacks, which can be propa- 
gated through freely distributed ‘point and click’ 
programs, can easily render a Web server offline 
without the victim realising the actual damage that 
has taken place. 

Both Code Red and Nimda can loosely be 
classified as ‘network propagating’ worms. They 
are distinguished by their design to slip right 
through perimeter security devices and wreak 
havoc on an internal network, eating up both 
bandwidth and available network resources. 

At the peak of its propagation, it was esti- 
mated the Code Red worm had compromised 
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some 250,000 systems in less than 24 hours 


by installing the zombies on machines used to 
perpetrate a DoS attack. 

The complexity of these attacks is increasing, 
the results are more disabling. As we saw last 
month, Nimda had the ability to propagate via 
e-mail attachments, compromised Web sites, back- 
doors created by the Sadmind and Code Red II 
worms, or through exploitation of the Internet 
Information Server (IIS) Unicode vulnerability. 

In many cases, Nimda forced organisations 
to close all Port 80 http traffic entering their 
networks in an attempt to avoid being infected by 
the virulent and destructive worm. For the less 
fortunate, it was a case of establishing the extent 
of the damage after the fact. 

Whilst Code Red only targeted a single, 
specific location, there is no reason to believe new 
variants could not be designed to attack any site. 

Attack tools are now readily available over 
the Internet and have been improved by simplified 
graphical user interfaces (GUIs). As a result of these 
developments, we can only expect the number of 
attacks to continue to grow rapidly. 

It follows that we will see even more of 
these integrated network worm/DDoS attacks and 
that each incarnation will appear even more legit- 
imate than the last, making combating them a 
network security nightmare. 

In the past, malicious hackers only broke 
into targeted machines such as credit unions and 
financial institutions. While this activity still 
remains, it is more and more common to find that 
today’s perpetrators will target and break into any 
exploitable machine, and discover afterwards if it is 
possible to reap any financial benefit. The rising 
number of Web site defacements in recent years 
suggests its more of a competition to see which 
group of hackers can break into the most machines 
— much like a bunch of cyber punks running 
rampant spray painting their mark everywhere. 

However, far more sinister is the threat of 
‘cyber terrorism’. Webster's Dictionary defines cyber 
terrorism as “the unlawful use or threatened use of 
force or violence through the use of the Internet or 
connected networks by a person or an organised 
group against people of property with the intention 
of intimidating or coercing societies or governments, 
often for ideological or political reasons”. 

While there are hardly any instances that 
can be cited to date where cyber attacks have 
directly cost lives, the economic impact can no 
longer be ignored as it is a key differentiator in an 
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environment where more and more organisations 
conduct business over the Internet. 

Furthermore, the potential cost associated 
with compromised corporate and government 
resources extends beyond the purely financial to 
include the safety of individuals and infrastructure 
in the physical world. 

So, if hackers and cyber terrorists constantly 
seek out new technology to break into Web 
servers, shouldn’t companies take the same 
approach when it comes to protecting themselves? 
If the ramifications of an e-commerce security 
compromise can be financial, legal, operational, 
shouldn’t an organisation’s investment in security 
be directly proportional? 

The problem is that businesses are often 
unsure how to determine their security require- 
ments. The plethora of different solutions available 
today to fight hackers and cyber terrorists sees 
many organisations now deploying reactively to 
secure their networks against such attacks. 

To date, many organisations have installed 
firewalls, virus detection software, and user authen- 
tication systems as the basic triumvirate of security 
measures to protect the internal network from 
external attack. Yet the threat to the internal net- 
work and Internet Web site continues to grow. 

Why? Believe it or not, many IT managers 
believe that their firewall will stop Web based 
attacks, or that their IDS will prevent hackers from 
breaking in. Considering the importance of these 
technologies in a layered secure network, few 
people have a proper appreciation of their purpose 
in the security architecture. 

Hacking isn’t always an obvious thing, 
where alarm bells go off and your Web site crashes. 
Some of the most insidious — and indeed most 
purposeful — network trespasses happen silently, 
committed by hackers who know how to avoid real- 
time detection. Who are you going to blame when 
you come in one morning and 20,000 of your 
customers’ credit card files are gone? If you’re not 
prepared, you'll have more trouble answering that 
question than your customers will. 

A ‘set and forget’ approach may have been 
permissable a couple of years ago but, today, 
organisations need to have flexible and robust 
virus protection and attack mitigation devices 
in place and to be prepared to adapt these to 
mitigate attacks as they become evident. 

Being pro-active will allow your organisa- 
tion to have defences in place. With the 
increased complexity of attacks, it may require a 
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combination of security devices to efficiently put 
an end to the attacks. 

Carefully consider your risks to determine 
the level of security you require. Unfortunately, 
with today’s economy, cost seems to be one of the 
drivers of ‘how much security is enough?’ It is 
important to weigh the risks of a potential attack 
before cutting the budget on security. 

For starters, look at a firewall and/or an attack 
mitigation combination. Next, a scalable Intrusion 
Detection System (IDS) solution will allow you to 
keep a close watch on your network's activity. 

Businesses will increasingly need to combine 
the ability to repel attacks with forensic data 
capture as governments legislate to make the 
industry accountable for security breaches. 

Organisations that do not incorporate attack 
mitigation in their security infrastructure not only 
risk suffering an inbound DoS attack, but could 
face legal consequences if their networks are found 
responsible for compromising other organisations. 

The need for IT professionals to conduct 
their own forensic investigations is on the rise, 
especially given that intrusions are becoming 
stealthier and are not always detected as they are 
happening, but rather after the hacker has already 
come and gone. 

Another factor fuelling the emphasis on 
do-it-yourself forensics is the staggering cost of 
outsourcing such post-attack investigations, 
which can average over $20,000 per incident. 

A proactive monitoring solution should 
enable a CEO to turn to their IT person and say: 
“Show me a report detailing everything that was 
happening on our network at 12:04 in the after- 
noon.” And the exciting thing is, that person 
could do it. 

Finally, and most importantly, train your 
employees — having personnel educated in the art 
of using these security technologies is probably 
your most valuable asset. 

A preventative approach that incorporates 
attack mitigation, properly configured and load 
balanced firewalls, intrusion detection systems, and 
centralised management and reporting of security 
incidents, will be an organisation’s best defence. 

To combat the hacker and modern day cyber 
terrorist, there should be a stronger emphasis on 
planned security measures, with an increasing focus 
on preventative infrastructure rather than ‘prescrip- 
tion-style’ cures. 


Joe Magee is chief security officer at Top Layer Networks. 


It is important to 
weigh the risks of 
a potential attack 
before cutting the 
budget on security. 
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book review 


eBeginners Get Help 


The goal here 
should be to have 
an understanding 
of the available 
client technologies. 


WORK 


ROBERT C. ELBENPETER 


rosy 4. VELTE 


ue 


on’t be fooled into thinking that, 

because of its title, the recently pub- 

lished book “eBusiness: A Beginner's 
Guide’ only contains information that’s relevant to 
those people just starting out with e-commerce. 

Although the title has obviously been 
designed to attract readers with little or no experi- 
ence in this area, the book also contains plenty of 
material that will challenge and stretch even 
seasoned e-commerce practitioners. Part of the 
“Network Professional’s Library” series from 
Osborne/McGraw-Hill, the book is aimed at soft- 
ware developers and business people who work for 
organisations that are engaged in a variety of aspects 
of e-commerce, such as e-tailing, B2B e-commerce, 
EDI (electronic data interchange) and CRM. To get 
a quick feel for the book, let’s now take a look at the 
sorts of topics that are covered. 

The book begins with a brief history of 
e-business and how it has evolved up to its present 
day structure. The importance of doing this is that 
it allows the authors to explain the major concepts 
of conducting business in this way, and to also 
introduce the terms and jargon that are associated 
with it. The second part of the book’s introduction 
then explores the reasons why businesses would 
want to have an e-business strategy in place. 

However, it’s in the next section of the 
book, appropriately titled “E-business servers and 
clients” that the discussion starts to hot up. By the 
time you've finished the three chapters that it 
contains, you'll have a better idea about the diff- 
erent network operating systems that are available 
(for example, from manufacturers such as 
Microsoft, Sun and Novell), and which one of 
them is probably best suited to your company’s 
unique e-business requirements. 

There’s also a detailed look at configuring 
servers so that they can be used to deliver e-busi- 
ness content to customers in the most efficient 
manner. And most importantly, there’s an inves- 
tigation into the needs of customers. This is an 
area that’s unfortunately overlooked by many 
developers who single-mindedly focus only on the 
technological aspects of the e-business solution. 


Title: eBusiness: A Beginner's Guide 
Author: Toby J. Velte and Robert C. Elsenpeter 


Published by: Osborne/McGraw-Hill 
Published: 2001 

ISBN: 0-07-212744-9 

RRP: $73.95 


According to the book’s authors, Toby 
Velte and Robert Elsenpeter, the goal here should 
be to have an understanding of the available 
client technologies. This would then ensure that 
customers’ visits to the site are both “more mem- 
orable and useful”. 

The third part of the book concentrates on 
the nitty gritty that’s involved in building a 
network infrastructure that can support the new 
e-business. The first two chapters in this section 
respectively cover local area networks (LANs) 
and wide area networks (WANs), with the 
emphasis on architecture, components, and 
design considerations. But a network, regardless 
of its type or structure, is worthless unless it can 
deliver a fast and reliable service to a company’s 
clients and customers. 

That’s why the authors have included a 
chapter that covers the vital issue of quality of 
service (QoS). And undoubtedly, the other prime 
concern of all e-business owners is maintaining 
their sites’ online availability. For insights into 
how that can be achieved, readers of the book can 
turn to the chapter titled “Maintaining and opti- 
mizing e-business sites”. 

The final two parts of the book are devoted 
to first, the security for adequately protecting an 
e-commerce environment, and second, the prob- 
lems with building an e-business that’s required to 
fit in with an existing system (or set of systems). 

One of the advantages with “eBusiness: A 
Beginner's Guide” is reflected in the way that the 
book has been structured. Because the chapters are 
largely self-contained, you can pick up the book 
and turn to the specific chapter or section that 
you're interested in. The other aspect of the book 
that’s appealing is its emphasis on practicality, 
with case studies used to reinforce the theory that 
is presented. 


Tony Stevenson is the author of The Australian Guide 
to Online Business (www.mkdsoftware.com.au/online). 
He is also the publisher of the free e-mail newsletter 
Internet Update. Subscribe at 
www.mkdsoftware.com.au/maillist.asp. 
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Private Sector Privacy Laws 


By Chris Bevitt and Danny Zeman 


rom 21 December 2001, most companies will have to comply 

with new rules concerning personal information. These new 

rules are known as the National Privacy Principles or NPPs, 
and now form part of the Privacy Act 1988. 

Broadly speaking, the NPPs regulate the collection, use, quality, 
security, transfer and content of personal information about individuals 
held by an organisation. There are ten NPPs in all, summarised below. 

Principle 1 — Collection: The foundation of the collection princi- 
ple is that “an organisation must not collect personal information unless 
the information is necessary for one or more of its functions or activities”. 
Organisations must also ensure that the individual is aware of the 
organisation’s identity and why the information is being requested. 

Principle 2 — Use and Disclosure: Personal information must 
not be used or disclosed for any secondary purpose unless it is related 
to the primary purpose of collection; and individuals should be able to 
reasonably expect the secondary purpose for use or disclosure to apply. 

Principle 3 — Data Quality: Organisations must try to ensure 
that the personal information they collect, use or disclose is accurate, 
complete and up to date. 

Principle 4 — Data Security: Personal information must be 
protected from misuse and loss. If personal information is no longer 
required, organisations must take reasonable steps to destroy or 
permanently ‘de-identify’ it. 

Principle 5 — Openness: Organisations must make available 
their policies on management of personal information, and, on 
request, must take reasonable steps to let the person know what sort 
of personal information it holds and for what purposes. 

Principle 6 — Access and Correction: Generally, organisations 
must provide individuals access to their personal information on 
request. If an individual can show that the personal information held 
by the organisation is not up to date, then the organisation must take 
reasonable steps to correct this. 

Principle 7 — Identifiers: An organisation must not adopt the 
identifier or reference of an individual that has already been assigned 
by an agency (for example Tax File Numbers or Medicare Numbers). 

Principle 8 — Anonymity: Wherever lawful and practicable, 
individuals must have the option to not identify themselves when 
entering into transactions. 

Principle 9 — Transborder Data Flows: An organisation can 
only transfer information overseas if it reasonably believes that the 
overseas recipient of the information is subject to a law that upholds 
similar principles to the NPPs. 


Principle 10 — Sensitive Information: ‘Sensitive information’ 
includes information revealing racial origin, political opinions, mem- 
bership of a political association, religious beliefs, philosophical beliefs, 
membership of a trade association or trade union, sexual preference or 
practice or criminal record. This must not be collected except in certain 
circumstances including where the individual has consented, where the 
collection is required or authorised under law, or where it is necessary 
for research or compilation of statistics relevant to community welfare. 

Under the Amendment Act, individuals who believe that their 
personal privacy has been breached may complain to the Privacy 
Commissioner or the complaints handling body established under 
the relevant industry Code. The Privacy Commissioner (or relevant 
Code adjudicator) may make a determination if one of the ten NPPs 
has been breached, a determination enforceable in the Federal Court 
or Federal Magistrates Court. 

However, determinations are considered to be the last resort 
and other dispute mechanisms, such as mediation, are encouraged. 
Complainants may be awarded compensation by way of damages by 
the Privacy Commissioner. Currently, there is no cap on damages. 

There are some exemptions under the Act to exclude certain 
types of organisation from compliance with the NPPs. 

Firstly, most businesses with an annual turnover of less than 
$3 million will be exempt. However, this small business exemption 
does not apply to those businesses providing health services and 
holding health information, those contracting with the Common- 
wealth Government or those who collect personal information for a 
benefit (such as direct marketing companies). There are also exemp- 
tions for journalists and political parties. 

More general exemptions exclude certain uses of information by 
a wider range of private sector entities from compliance with the 
NPPs. In particular, personal information contained within employee 
records and used for employment related purposes is exempt. Also 
exempt is the use of personal information for domestic reasons. 

Organisations covered by the Act must take steps now to 
ensure that they will be in a position to comply with the Act from 
21 December 2001. Appropriate steps include adoption of an 
approved industry privacy code, adoption of a privacy statement, 
undertaking a privacy audit and establishment of procedures and 
safeguards to ensure ongoing compliance with the Act. 


Chris Bevitt is a partner and Danny Zeman is a paralegal with the Technology, 
Telecommunications & Competition Group of Middletons Moore & Bevins. 
This column contains a general discussion of relevant law only and is not a 
substitute for appropriate legal advice. Liability limited by the Solicitors 
Scheme, approved under the Professional Standards Act 1994 (NSW). 
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By Mark White 


uring the period characterised by Alan Greenspan as 
D one of “irrational exuberance”, we saw — possibly for 

the first time — software engineering trends become 
‘waves’ of investment. While justification as the next big thing 
came courtesy of astronomical valuations rather than just plain 
revenues, we were, however, treated to a couple of genuine 
innovations; or at least innovations made by someone who looked 
to solve a problem, rather than just follow the herd mentality so 
prevalent in today’s technology industry. 

We saw it first with portals, then — in succession — search 
engines, B2B exchanges, e-commerce and Web tools, streaming 
media and open source. Blessed by low barriers to market entry, 
one or two combatants in each segment sped to define and create 
their space, establish brand equity and occasionally produce 
revenues, while the third through three-hundredth market 
entrants bled their VC’s cash and either died or were swallowed up 
in low value acquisitions. 

A few lived on long enough to re-define their business 
models (industry-speak for the desperate search to find something 
else to do while there was still cash in the bank). Investors 
deserved what they got for failing to analyse the addressable 
market opportunity correctly, being caught up in the hype, or 
thinking that the bubble wasn’t really a bubble. 

But there’s one segment of ‘hype’ I believe to still have 
potential. Publicised (if not immortalised) by the popularity of 
the Napster and Gnutella applications and eponymous services, 
P2P came on the tail-end of deflated industry hype around B2C 
and B2B (yes, we saw Ariba’s stock price go to the moon — but it 
also fell back to earth rather unglamorously), and mostly on 
the back of poster-child Napster, who’s founder wanted nothing 
more than to create a loophole where they weren’t really distrib- 
uting pirated MP3 files, while we all established gigabyte music 
stockpiles on our PCs. 

Blessed with a monstrous cheer squad and mass media hype, 
Napster led the peer-to-peer rally over the last two years. 
Hey, who’s to complain about free music? But they also made a 
couple of minor tactical blunders — namely in making enemies of 
Metallica (who in their right minds would ever, ever purposely set 
out to wrong someone who influences legions of tattoos and 
leather!), pretty much the entire recording industry and — in what 
must have been a real ‘D’oh!’ moment — they forgot to establish 
any sort of credible business model around their activities. 


Kiss-and-make-up deals with the recording industry to salvage the 
brand may be Napster’s only option right now, but it will be a far 
cry from the founder’s original intentions. 

So we are forced back to the drawing board. And how! 
Craning to catch the peer-to-peer wave formed by Napster are 
literally dozens of other companies, now convinced that their 
particular flavour of legitimised file sharing software is the answer. 
But what precisely was the question again? 

If you answered “content delivery networks!” you are probably 
close to the money, at least where the investment community is 
concerned. This past (northern hemisphere) summer has seen 
venture capital injections into software-based technologies surge; 
in some part due to this renewed interest in the peer-to-peer 
paradigm. Buoyed by interest in OpenCola, Kontiki, Red Swoosh 
and others, Sun’s acquisition of InfraSearch and publisher Tim 
O’Reilly’s active support of the research community — his books 
and P2P conferences are the new cheer squad for peer-to-peer 
development — venture capitalists and industry pundits alike are 
looking for a new wave of leaders who could turn the tables and 
actually create real revenues from peer-driven software. 

It’s a noble quest, and one perhaps as old as the Internet itself. 
Bob Metcalfe’s law about a network’s value increasing expo- 
nentially as nodes are added could have been written for P2P, but 
while content-delivery providers like Akamai and Speedera Net- 
works have already deployed working infrastructure solutions, their 
software-only P2P competitors are still working out the details. 

The corollary applications for P2P — messaging, search 
engines and directories — also show some promise, but will be 
trying to gain exposure in a mature and well-serviced space. 
Unless there is a quantum leap in capabilities, some form of 
content delivery will remain the flagship effort. 

Perhaps as we look at this space and hope the next great 
idea turns up on our cocktail napkin, we can forget about the 
‘get big fast’ approach to growing a business and instead focus 
on innovating to solve such a problem that people will give us 
money for doing so. In bypassing the hype, we can hope to not 
only satisfy Mr. Greenspan’s hope for a recovery, but also 
demonstrate that by really harnessing the power of many we can 
fulfil the true promise of the Internet. P2P is a future ripe with 
such possibilities. 


Mark White is a former executive of Red Hat, Inc, and has worked in 
most of the countries in Asia as well as the US. He writes each month 
about the business of doing software, and can be reached on 
mark.white@auug.org.au. 
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Carting the Nightsoil of the New Economy 


By Richard Chirgwin 


uinn says one of the burning questions of the New New 
Q Economy is how to write a resume. 

“New New Economy?” 

“The New Economy was the one where the business plan 
mattered most. Nobody cared what happened to the VC money, 
just as long as the business plan explained why there would be 
enough suckers to keep the share price high enough for long 
enough for the VCs to get the hell out and leave the suckers 
holding the bag. You know, the pyramid scheme.” 

“Yep. And the New New Economy is the one where you 
have to make money?” 

“Yeah, the one where the balance sheet’s more important 
than the business plan.” 

“Okay,” I said, “so the first thing that happens in the New 
New Economy is a savage devaluation in the value of PowerPoint 
design skills in the CV?” 

“That's a start,” Quinn said. “When the idiot children of 
rich fat arseholes were chucking money around like a private 
school dining hall food-fight, someone who could sex up animated 
ppt files was worth a good ten million. Now, the idiot sons 
are relegated to charity golf days, the rich fat arseholes are 
handing the money out themselves, and they don’t give a damn 
about the presentation. Dim the lights in the boardroom and 
they'll call security.” 

That led us to discuss what else the scrapped kiddies are 
going to jettison from their CVs to try and get themselves back 
into the action. And the biggie will be vendor training. 

“What, no more gilded youths with MCSEs?” I asked. Alas, 
it’s not to be. 

“No, some things will be with us always,” Quinn said. 
“Microsoft training and Cisco training are going to be eternal. No 
matter what happens.” 

His next remark, that ubiquity and unreliability made the 
perfect product combination for valuable vendor training, I 
regarded as frivolous .. . and anyway, every dotcom layoff at least 
has an MCSE, so the competition in the market for reboot robots 
is going to be pretty tough. 

He swears, in spite of what’s being said in headhunter press 
releases, that there’s still work to be had in IT. 

“But the IT job surveys are all so gloomy,” I said. 

“That’s because they only understand the bits of the market 
that they were consulting to,” Quinn said. 


Headhunters got slack in the boom times just like every- 
body else, Quinn explained: one HR consultant placing two 
people in each week on a 15% commission is on the fast track 
to Porscheville. Once you had fifty or so people in the database, all 
you had to do was keep getting new companies to headhunt your 
old clients and you had it made. Not only did the commissions 
flow, your clients’ CVs got fatter every six months or so. 

“You just needed a little recruitment to account for attri- 
tion. Sometimes people would actually stay in a job rather than 
move on, but mostly, IT people have learned more loyalty to their 
headhunters than to their employers.” 

Now, that’s all over — and a fat CV doesn’t look so good. 
Dropping a CV as thick as an analyst report on a prospective boss 
is a bad sign: it means you've been loyal to your headhunter, and 
it means you've done lots of training courses for products that no 
longer exist. 

The new discipline in the new job market of the New New 
Economy, Quinn says, is to slim down the CV. 

“Start by chucking away at least half of the jobs,” he said. 

“The downside to that,” I said, “is having to explain away 
long stretches of unemployment in the CV. Surely four jobs in a 
year looks better than two jobs and six months doing nothing?” 

“No way,” said Quinn. “Four jobs in a year marks you as 
having a good relationship with your headhunter. Six months 
unemployed suggests you had to look for work on your own...” 
“".. even if you didn’t...” 

“Right.” 

IT people also need to choose with care what training they 
own up to. 

“For a start,” Quinn said, “If a company’s listed on 
www.fuckedcompany.com then you don’t want its training 
certificate in your CV. Then, start working out what else to ditch. 

“Ring through all the vendors in your training list,” he 
said. “If the Australian office is gone, don’t tell anyone you did 
the training.” 

“Because it makes you look like a loser?” 

“At least,” he said, “it makes you look like you backed a loser.” 

“So, you cut out half your job history and most of your 
product training,” I said. “What if you still can’t get a job?” 

“Get yourself a brand-new MCSE, a Cisco TCP/IP and 
security course, both of them with this-years’ date, and pretend 
you spent the last five years as a nightsoil carter.” 

“So the answer to too much training is to do some training?” 

“It’s a hard world we live in,” said Quinn. 
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DB2 USERS GROUP 


Independent © Not-for-Profit © User Run 


IDUG Headquarters 
401 N. Michigan Avenue 
Chicago, IL USA 
60611-4267 


Tel: +1.312.644.6610 
Fax: +1.312.321.5158 
Email: idug@idug.org 
Web: www.idug.org 


SCHEDULE OF EVENTS 


WEDNESDAY, 7 NOVEMBER 


7:00-17:30 
Registration Open 
Ground Level Foyer 


7:00 
DB2 Certification Testing 
Menzies 


9:00-10:30 

Keynote Presentation: Data When 
You Want it, Where You Want it 
Dr. BRUCE LINDSAY, IBM ALMADEN 
RESEARCH CENTER 

Bradman Theatrette 


10:30-19:30 
Products & Services Exhibition Open 
Ballroom 


10:30-11:00 
Coffee Break - Ballroom 


11:00-12:30 

Al — DB2 Version 7 and Beyond 
ROGER MILLER, IBM SILICON VALLEY LAB 
Swan 


B1 — Developing Applications for 
High Performance e-Business 
RICHARD YEVICH AND SUSAN LAWSON, 
YEVICH, LAWSON & ASSOCIATES, INC. 
Bradman Theatrette 


C1 - DB2 Performance with 
COOL:Gen 

MICHAEL HANNAN, CPT GLOBAL 
Fitzroy 


D1 - High Availability and 
DB2: Concepts, Hints/Tips 
and Recent Enhancements 
LESLIE CRANSTON, IBM TORONTO LAB 
Murray 


E1 — eApplications Designing 
for Performance 

PHIL GRAINGER, COMPUTER ASSOCIATES 
INTERNATIONAL 

Derwent 


12:30-13:30 
Lunch - Ballroom 


13:30-14:30 

A2 — Large Objects in DB2 for 
z/OS and OS/390 

Jay YOTHERS, IBM SILICON VALLEY LAB 
Bradman Theatrette 


B2 —- Optimiser SQL and 
Performance Enhancements in 
DB2 UDB for OS/390V6 
JAMES Guo, IBM SILICON VALLEY LAB 
Swan 


C2 — Streamlining RBDs for 
Performance and Availability 
MICHAEL FINNIS, PRINCETON SOFTECH 
AUSTRALIA 

Fitzroy 


D2 - Infotel Utilities Solutions for DB2 
NORBERT THEIBAUD, INFOTEL CORPORATION 
Derwent 


E2 —- DB2 UDB Data Links 
Technology & Solutions 

VITTHAL GoGaTE, IBM SANTA TERESA LAB 
Murray 


14:45-15:45 

A3 — Beyond the Utilities — 

DB2 UDB for OS/390 Data 
Management Tools 

DAVID SCHWARZ, IBM SILICON VALLEY LAB 
Swan 


B3 — Identity Columns: 

Automatic Sequential Key 

Value Generators in DB2 

RAMANI CROISETTIER, IBM SILICON VALLEY LAB 
Fitzroy 


C3 — Crossing Over/Breaking 
Through the DB2 Platform Barrier 
JIM WANKOWSKI, QUEST SOFTWARE 
Derwent 


Schedule, speakers and sessions are all 
tentative and subject to change. Reference 
the Daily Globe attendee newsletter for 
the latest conference information. 


D3 —- Locking and Concurrency in 
DB2 UDB for UNIX and Windows 
LESLIE CRANSTON, IBM TORONTO LAB 
Murray 


E3 — What’s New in DB2 Connect V7 
LEON KATSNELSON, IBM TORONTO LAB 
Bradman Theatrette 


15:45-16:15 
Coffee Break 
Ballroom 


16:15-17:15 

A4 — Recovery Resources... 
The Guide to Getting IT Back 
CHRIS SACKFIELD, BMC SOFTWARE 
AUSTRALIA Pty LTD 

Fitzroy 


B4 - DB2 for OS/390 Subsystem 
Management Best Practice Review 
DAVID TIGHE, BMC SOFTWARE 

Derwent 


C4 —- The XML DBA 
Troy COLEMAN, COLEMAN CONSULTING, INC. 
Swan 


D4 -A Technical Review of Logging 
on DB2 UNIX and PC 

Tony WINCH, DATASYNC CONSULTING 
Bradman Theatrette 


E4 - Data Warehouse Data Modeling: 
Logical vs. Physical 

LarissA Moss, METHOD Focus, INC. 

Murray 


17:30-18:30 
Special Interest Groups (SIGs) 


DB2 UDB for UNIX and NT 


Derwent 


DB2 UDB for Linux 
Murray 


Application Development 
Swan 


DB2 UDB for OS/390 
Bradman Theatrette 


19:00-22:00 
Welcome Reception 
Ballroom 


THURSDAY, 8 NOVEMBER © 


7:00-17:30 
Registration Open 
Ground Level Foyer 


7:00-8:00 
Breakfast Vendor Briefing Sessions 
Ballroom & Swan 


8:00-19:30 
Products & Services Exhibition Open 
Ballroom 


8:30-10:00 

A5 — Table Design for 

High Performance 

RICHARD YEVICH AND SUSAN LAWSON, 
YEVICH, LAWSON & ASSOCIATES, INC. 
Bradman Theatrette 


B5 — New Technology for 
Online REORG 

BRUCE LINDSAY, IBM ALMADEN 
RESEARCH CENTER 

Swan 


C5 — Optimiser SQL and 
Performance Enhancements in DB2 
UDB for z/OS and OS/390 V7 
JAMES Guo, IBM SILICON VALLEY LAB 
Derwent 


D5 — SORT is a FOUR letter Word 
Scott Hayes, DGI 
Fitzroy 


E5 — DB2 Universal Database 
Version 7.2 Technical Overview 
GEORGE BAKLARZ, IBM TORONTO LAB 
Murray 


10:00-10:30 
Coffee Break 


Ballroom 


10:30-11:30 

A6 — DB2 for z/OS and OS/390 
Java Technology Update 

ROGER MILLER, IBM SILICON VALLEY LAB 
Bradman Theatrette 


B6 —- TBD 


C6 — From Green Screen to Browser 
PETER SCHWARCZ, SCHWARCZ COMPUTER 
SERVICES Pty LTD 

Fitzroy 


D6 — Building DB2 Web Applications 
That Don’t Fail 

LEON KATSNELSON, IBM TORONTO LAB 

Swan 


E6 — JCL to UNIX — Out of 
the Frying Pan, Into the Fire! 
GRAHAM EARL, PRINCETON SOFTECH 
ASIA PACIFIC 

Murray 


11:45-12:45 

A7 — Reorganising the DB2 
Catalog and Directory 
ALLEN H. EDLICH, UFD AG 
Murray 


B7 — Outer Joins - Where Do 
You Code Your Predicates? 
TERRY PURCELL, YEVICH, LAWSON & 
ASSOCIATES, INC. 

Bradman Theatrette 


C7 — Improving DB2 Performance 
Using Statistics 

RICHARD BOLESTA, COMPUTER ASSOCIATES 
INTERNATIONAL 

Swan 


D7 — Unscrewing the Utilities 
BRUCE ALLEN, GRAPEVINE INFORMATION 
TECHNOLOGY 

Derwent 


E7 — Siebel eBusiness Applications 
on DB2 UDB for OS/390 

BLAINE LUCYK, SIEBEL SYSTEMS 

Fitzroy 


12:45-13:45 
Lunch — Ballroom 


13:45-14:45 

A8 — Data Movement Utilities 
from Princeton Softech 
MICHAEL FINNIS, PRINCETON SOFTECH 
Fitzroy 


B8 — DB2 Utilities from BMC 
DAVE LINSELL, BMC SOFTWARE 
Murray 


C8 — High Speed Data Access — 
Essential to Web Sites 

STEWART TATE, SOFTWARE SOLUTIONS 
Derwent 


D8 — Adventures in Data Replication 
DAVID BEAUDOIN, FIRST INVESTORS CORPORATION 
Bradman Theatrette 


Best User Presentation from IDUG 2001 - North America 


E8 — Business Intelligence 
with DB2 UDB 

ANN VALENCIC, IBM AUSTRALIA 
Swan 


14:45-15:15 
Coffee Break — Ballroom 


15:15-16:15 

A9 — Migration to DB2 Version 6 & 7 
ROGER MILLER, IBM SILICON VALLEY LAB 
Bradman Theatrette 


B9 — SQL Triggers in DB2 for OS/390 
JAY YOTHERS, IBM SILICON VALLEY LAB 
Murray 


C9 — Database Privacy Issues 
ANDREW LEASK, DSN Group Pty Ltp 
Fitzroy 


D9 — Moving from Sybase or 
Oracle to DB2 

Les KING, IBM TORONTO LAB 
Derwent 


E9 — WebSphere VisualAge for 
Java to Your DB2 Data — The 
Story Continues — Part 1 

PEGGY RADER, IBM SILICON VALLEY LAB 
Swan 


16:30-17:30 

A10 — Online REORG 
Implementation Strategy 

CRAIG FISKE, IBM SILICON VALLEY LAB 
Murray 


B10 — To Split or Not to Split: 
A Bufferpool Case Study 

MIKE BARNARD, FULFORD IT 
Bradman Theatrette 


C10 — Tuning DB2: End to End Process 
Gary CASSAR, CPT GLOBAL LTD. 
Derwent 


D10 —- DB2 UDB UNIX-NT: 
Physical Design for Performance 
TREVOR KINGSBURY, MATRIX COMPUTING PTy LTD 
Fitzroy 


E10 — WebSphere VisualAge for 
Java to your DB2 Data — The 
Story Continues — Part 2 

PEGGY RADER, IBM SILICON VALLEY LAB 
Swan 


19:00 

Evening Reception/Event 

Buses Depart for Questacon from the 
National Convention Centre 


(CONFERENCE EVENTS 


Special Interest Groups 


Wednesday, 7 November 17:30-18:30 
Special Interest Groups (SIGs) are the 
perfect opportunity to get your specific 
questions answered by industry experts 
and colleagues who share similar DB2 
interests. Meet with your peers in these 
focused groups and walk away with 
answers to your DB2 challenges. 


DB2 UDB for UNIX and NT 
MODERATOR: BRUCE ALLEN, GRAPEVINE 
INFORMATION TECHNOLOGY 
PARTICIPANTS: LESLIE CRANSTON, IBM 
TORONTO Las; Scott Hayes, DGI; TONY 
WINCH, DATASYNC CONSULTING 


FRIDAY, 9 NOVEMBER 


7:00-12:00 
Registration Open 
Ground Level Foyer 


7:00 
DB2 Certification Testing 
Menzies 


7:00-8:00 
Breakfast Vendor Briefing Sessions 
Ballroom & Swan 


8:00-9:30 
IBM Panel/Conference Closing 
Bradman Theatrette 


9:30-10:00 
Coffee Break — Ballroom 


10:00-16:30 
In-Depth Seminars 
(Included in Three Day Registration Option) 


DB2 UDB for OS/390 Version 6 
for Application Developers 

Phil Grainger, Computer Associates 
International 

Derwent 


DB2 UDB for Linux 
MODERATOR: ANDREW LEASK, 
DSN Group Party LTD 
PARTICIPANTS: GEORGE BAKLARZ, 
IBM TORONTO LAB 


Application Development 
MODERATOR: GRAHAM EARL, 

PRINCETON SOFTECH ASIA PACIFIC 
PARTICIPANTS: SHERYL LARSEN,SHERYL M. 
LARSEN, INC.; PETER SCHWARCZ, SCHWARCZ 
COMPUTER SERVICES PTy LTD; TERRY 
PURCELL, YL& A 


DB2 UDB for OS/390 

MODERATOR: RON GOTTSCHALK, 
NEOTRON COMPUTING CONSULTANTS 
PARTICIPANTS: JAY YOTHERS, IBM SILICON 
VALLEY LAB; ROGER MILLER, IBM SILICON 


High Performance Design for 
DB2 UDB for OS/390 Version 7 
Richard Yevich & Susan Lawson, 
Yevich, Lawson & Associates, Inc. 
Bradman Theatrette 


DB2 Universal Database Version 7 
Internals in a Day 

Leslie Cranston, IBM Toronto Lab 
Fitzroy 


Critical Success Factors for Business 
Intelligence Applications 

Larissa Moss, Method Focus, Inc. 
Murray 


12:00-12:45 
Lunch — Swan 


16:30 
Conference Adjourns 


INLERNAITONAL 
DB2 USERS GROUP 


VALLEY LAB; AND QUANG PHUNG, 
DB2 LINK Pty Ltp 


Exhibit Hall Hours 

IDUG brings the solutions and 

experts you need to the IDUG 
Products & Services Exhibition. 

This exhibition provides face-to- 

face interaction with leading data 
management vendors. 

As you enhance your DB2 know- 

ledge through the technical sessions, 
IDUG vendor members will be ready 
to round out your experience by 
identifying the best DB2 product 
solutions. Stop by the IDUG 

Products & Services Exhibition: 
Wednesday, 7 November 10:30 — 19:30 
Thursday, 8 November 8:00 — 19:30 


Welcome Reception 


Wednesday, 7 November 
18:30-20:30 

Start the week off right. Renew 
acquaintances and begin building 
relationships with new DB2 peers 
at the Welcome Reception. 


Vendor Breakfast 
Briefing Sessions 

Attend these informal breakfast 
sessions on Thursday and Friday 
morning for an opportunity to 
hear in-depth presentations by 
industry-leading vendors. 
Knowledgeable representatives 
from top DB2-related vendors will 
address popular DB2 challenges 
and the solutions they can offer, 
while you enjoy a plated breakfast. 


Gala Reception 


Thursday, 8 November 
19:00-22:00 

Enjoy a snack and beverage while 
viewing the latest DB2 products 
and services at Questacon. 


IBM Panel 


Friday, 9 November 

8:00-9:30 

This interactive session gives con- 
ference delegates the opportunity 

to “ask the experts,” IBM’s top DB2 
developers and decision-makers. A 
panel of IBM experts, skilled in all 
aspects of DB2 usage and management 
will be available to take your questions 
and share the answers with you and 
your peers. Panellists include: 

GEORGE BAKLARZ, IBM TORONTO LABORATORY; 
LEON KATSNELSON, IBM TORONTO LABORATORY; 
Dr. BRUCE LINDSEY, IBM ALMADEN RESEARCH 
CENTER; ROGER MILLER, IBM SILICON VALLEY 
LABORATORY; PEGGY RADER, IBM SILICON 
VALLEY LABORATORY; JAY YOTHERS, IBM 
SILICON VALLEY LABORATORY 


In-Depth Seminars 


Friday, 9 November 

10:30-16:30 

To help you gain the most from IDUG 
2001 — Asia Pacific, IDUG is offering a 
series of full-day, in-depth seminars. The 
fee for the following sessions is included 
in the three-day registration option. 


DB2 UDB for OS/390 Version 6 

for Application Developers 

PHIL GRAINGER, COMPUTER ASSOCIATES 
INTERNATIONAL 

This seminar will discuss the exploita- 
tion of Version 6 features to enable the 
generation and maintenance of business 
applications. DB2 UDB for OS/390 
Version 6 has become an active DBMS 
— learn how to use this active compo- 
nent. Attendees are encouraged to 
bring along issues specific to their site 
for discussion. This class will present 
information about functionality found 
in DB2 through Version 6. 


High Performance Design for 

DB2 UDB for OS/390 Version 7 
RICHARD YEVICH & SUSAN LAWSON, 

YEVICH, LAWSON & ASSOCIATES, INC. 

This presentation will cover the new 
enhancements to DB2 that are in 
Version 7 and focus on those that will 
have an impact on performance. 
Version 7 provides many enhance- 
ments for database and system produc- 
tivity. These enhancements include 
restart ‘light’, statistics history, dynamic 
DSNZPARMS, and several utility 
enhancements such as online Load 
Resume, Parallel Load, Unload. There 
are also application enhancements 
such as Fetch First n Rows, Single 
Index Support for Max/Min, Union 
Everywhere (Views, Table Expressions), 
and Commit/Rollback in a Stored 
Procedure. Many of these enhance- 
ments provide significant performance 
gains, but there are some caveats to 
their usage and these will be discussed. 
Also, the implementation of Java on 
the OS/390 is changing even after the 
Version 7 GA. We will present the lat- 
est information on OS/390 Java and its 
impacts on application performance. 


DB2 Universal Database Version 7 
Internals in a Day 

LESLIE CRANSTON, IBM TORONTO LAB 

This seminar will give you an in-depth 
look at the internal architecture and 
mechanics of DB2 UDB in order to 
gain a fundamental knowledge of how 
DB2 works under the covers. Internal 
components of the product will be 
examined in detail, from the communi- 
cation layer to the operating system 
layer, and we'll discover how they work 
together to provide DB2’s extensive 
functionality, scalability and perfor- 
mance. Understand query compilation 
and optimization; data, space and 
memory management; DB2’s process 
model and parallelism; data protection 
and recovery; locking and concurrency; 
and more. This seminar will provide 
you with a firm understanding of how 
DB2 works, so that you can better 
make DB2 work for you. 


Critical Success Factors for 
Business Intelligence Applications 
LarissA Moss, METHOD Focus, INC. 

This tutorial will explain why “silver 
bullet” technology solutions—such as 
those applied in Enterprise Resources 
Planning (ERP), Data Warehousing 
(DW), Analytic Customer 
Relationship Management (CRM), 
and Enterprise Application Integration 
(EAI)—have not worked for most 
companies. This session will explain 
the defects of the current application 
development approach and provide 

a roadmap for creating an effective 
“Corporate Information Factory” 
environment with clean, consistent 
and integrated data. 
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Compuware can help. Take the mind-numbing task of scanning 


for memory problems and performance bottlenecks, for instance. 


With our DevPartner Java Edition, you can pinpoint memory-devouring 


code and improve performance in minutes. 


CompuwareAsiaPacific 


The Leader in Application Lifecycle Technology 


Planning Developing Integrating Testing Implementing Managing Staffing 


